F/6  1/2 


ADA  0  8  75  2  4 


AFFDL-TR-79-3 1 07 


LANDING  SYSTEM  RELIABILITY 
AND  SAFETY  MODEL 


L.  FUDGE 
L.  GEPHART 
G.  Y1NGLING 

UNIVERSITY  OF  DA  YTON 
MAN  A  GEM  ENT  SCIENCE 
DAYTON,  OHIO  45469 


AUGUST  1979 


TECHNICAL  REPORT  AFFDL-TR-79-3107 
Final  Report  for  Period  September  1974  —  June  1979 


THIS  DOO'VYNT  IS  BF.ST  QUALITY  PRACTICJfflMU 


TIE  COPY  TO  DDC  CONTAINED  k 

SIGNIFICANT  JT'CcdER  OF  PAGES  iTHKM  fifl  W5 


REFRODUCI  LEGIBLY* 


Approved  for  public  release;  distribution  unlimited. 


AIR  FORCE  FLIGHT  DYNAMICS  LABORATORY 
AIR  FORCE  WRIGHT  AERONAUTICAL  LABORATORIES 
AIR  FORCE  SYSTEMS  COMMAND 
WRIGHT-PATTERSON  AIR  FORCE  BASE,  OHIO  45433 


80  8  4  025 


NOTICE 


When  Government  drawings, specifications,  or  other  data  are  used  for  any 
purpose  other  than  in  connection  with  a  definitely  related  Government  procure¬ 
ment  operation,  the  United  States  Government  thereby  incurs  no  responsibility 
nor  any  obligation  whatsoever;  and  the  fact  that  the  government  may  have 
formulated,  furnished,  or  in  any  way  supplied  the  said  drawings,  specifications, 
or  other  data,  is  not  to  be  regarded  by  implication  or  otherwise  as  in  any  manner 
licensing  the  holder  or  any  other  person  or  corporation,  or  conveying  any  rights 
or  permission  to  manufacture,  use,  or  sell  any  patented  invention  that  may  in 
any  way  be  related  thereto. 


This  report  has  been  reviewed  by  the  Information  Office  (OI)  and  is 
releasable  to  the  National  Technical  Information  Service  (NTIS).  At  NTIS,  it 
will  be  available  to  the  general  public,  including  foreign  nations. 


This  technical  report  has  been  reviewed  and  is  approved  for  publication. 


W.  DAVISON 
iject  Engineer 
Control  Management  Group 


EVARD  H.  FLINN,  Chief 

Control  Systems  Development  Branch 

Flight  Control  Division 


FOR  THE  COMMANDER 


MORRIS  A.  OSTGAARD,  Acting  Chief 
Flight  Control  Division 
AF  Flight  Dynamics  Laboratory 


"If  your  address  has  changed,  if  you  wish  to  be  removed  from  our  mailing 
list,  or  if  the  addressee  is  no  longer  employed  by  your  organization  please 
notify  AFFDL/FGL,  W-PAFB,  OH  45433  to  help  us  maintain  a  current  mailing 
list". 


Copies  of  this  report  should  not  h**  returned  unless  return  is  required  by 
security  considerations,  contractual  ooligations,  or  notice  on  a  specific  document. 

AIR  FORCE/967SO/13  FaOruiry  19*0-100 


A 


DISCLAIMER  NOTICE 


THIS  DOCUMENT  IS  BEST  QUALITY 
PRACTICABLE.  THE  COPY  FURNISHED 
TO  DTIC  CONTAINED  A  SIGNIFICANT 
NUMBER  OF  PAGES  WHICH  DO  NOT 
REPRODUCE  LEGIBLY. 


SIFICATION  or  THIS  PAGE  (When  Dmte  Rntered) 


REPORT  DOCUMENTATION  PAGE 


READ  INSTRUCTIONS 
BEFORE  COMPLETING  FORM 


ECIPIENT’S  CATALOG  NUMBER 


^LANDING  SYSTEM  RELIABILITY 
"AND  fiAFElV  MODEL'' 

2L.  «£'  - — 


6.  PERFORMING  OR 


a.;  CONTRACT  OR  GRANT  NUMBERS 


versity  o  „ 

-Management  Science  f  l/'1)  7  /  1  n  '1  J 

300  College  Park  Ave.  I  /A  J  l  '  (  I  (y\ 

Davton.  Ohio  45469  _ —■/—£— 

CONTROLLING  OFFICE  NAME  AND  ADDRESS  ^7~jfTflfn»E  fUTBx^-M- - - 

Air  Force  Flight  Dynamics  Laboratory  f  HT”*U o^mrnmM79  ! 

Air  Force  Wright  Aeronautical  Laboratories  f  /  I  fa.  - 

Air  Force  Systems  Command  V 

Wright-Patterson  Air  Force  Base.  Ohio  45433  ■ —  _ 

H  AGENCY  NAME  A  AOORESSf//  ittSmal  tram  Controlling  OltlcS)  IS.  SECURITY  CLASS,  (ot  thtm  report) 

(  IjO  1JJ19  UNCLASSIFIED 

V  .^1 _  IS*.  DECLASSIFICATION/ DOWNGRADING 

^ _ I -  schedule 


1 16.  DISTRIBUTION  STATEMENT  (ot  thlm  Report) 


Approved  for  public  release;  distribution  unlimited. 


I  IT-  DISTRIBUTION  STATEMENT  (ot  the  mbetrect  titered  in  Block  20.  li  different  from  Report) 


[IS.  SUPPLEMENTARY  NOTES 


IS.  KEY  WORDS  (Continue  on  reverse  elde  If  neceeemry  end  Identify  by  block  number) 

Reliability,  Safety,  All-Weather  Landing,  Mathematical  Models,  Risk 
Assessment,  Flight  Validation 


!|o.  ABSTRACT  (Continue  on  reverse  elde  If  neceeemry  end  Identify  by  block  number) 

A  total  systems  analysis  procedure  for  identifying  the  safety  hazards  and  risks 
associated  with  the  use  of  a  defined  flight  control  system  for  low  visibility 
approach  and  landing  (Category  III)  was  developed.  The  analysis  includes  the 
ground  transmitting  system,  airborne  automatic  flight  control  system,  pilot  and 
copilot  operating  in  the  system,  and  crew  procedures.  Actual  data  from  Category 
III  experience  in  a  specially  equipped  C-141  aircraft,  along  with  equipment 
failure  data  from  C-141  fleet  experience  was  used  to  test  and  confirm  the  model- 
ing  techniques.. 


IDVriON  OF  1  NOV  «S  IS  OBSOLETE 


SECURITY  CLASSIFICATION  OF  THIS  RAGE  (Pfcan  Data  End 

1053SO  Z 


FORE WARD 


I 


1 


HJ  ■)  L.JLM 

V  ..  ,•#  4  +J  S  i 

Jii  ■  T.  i  i  .*  -  - 


ft  _  __  J 

This  document  is  the  technical  report  on  a  total  systems  analysis 
procedure  developed  for  identifying  the  safety  hazards  and  risks  associated 
with  the  use  of  a  defined  flight  control  system  for  low  visibility  approach 
and  landing  (Category  III).  The  analysis  includes  the  ground  transmitting 
system  with  monitoring,  airborne  automatic  flight  control,  the  pilot  and 
copilot  operating  in  the  system,  and  crew  procedures.  Actual  data  from 
Category  III  experience  in  a  specially  equipped  C-141  aircraft,  along  with 
equipment  failure  data  from  C-141  fleet  experience,  was  used  to  test  and 
confirm  the  modeling  techniques. 

The  reliability/safety  analysis  program  reported  herein  is  a  part  of  a 
broad  joint  Federal  Aviation  Administration  (FAA)  and  Air  Force  (AF)  effort 
for  gathering  data  on  the  psychological,  physiological,  and  procedural  aspects 
of  landing  a  large  turbojet  aircraft  in  actual  low  visibility  weather  down  to  and 
including  Category  Illc  weather  (zero  ceiling  and  zero  visibility). 

There  are  a  number  of  reports  and  papers  dealing  with  parts  of  the  total 
program.  For  the  reader  who  needs  an  insight  into  the  total  program,  extracts 
of  important  details  are  included  in  the  appendices.  Where  more  detailed 
information  and  data  are  required,  references  may  be  obtained  for  further 
study. 

Program  management  for  the  overall  joint  program  has. been  provided  by 
the  Air  Force  Flight  Dynamics  Lab  (AFFDL/FGT)  under  Project  2187,  Low 
Visibility  Terminal  Area  Operations,  with  R eliability/ Safety  Analysis  support 
of  the  All  Weather  Landing  System  Program  (AWLS)  provided  by  the  University 
of  Dayton  under  contract  F33615-74-C-3075,  dated  June  3,  1974.  Flight  tests 
were  conducted  by  the  4950th  Test  Wing  of  the  Aeronautical  Systems  Division 
at  Wright  Patterson  Air  Force  Base,  Ohio. 


iii 


TABLE  OF  CONTENTS 


SECTION  PAGE 

I  INTRODUCTION  1 

I,  1  OBJECTIVE  1 

1.2  BACKGROUND  1 

1.  3  HISTORICAL  DEVELOPMENT  OF  PRESENT  PROGRAM  4 

II  SYSTEM  DEFINITION  AND  CONFIGURATION  7 

III  SYSTEM  PERFORMANCE  MODEL  15 

IV  GROUND  SYSTEM  DISCUSSION  24 

V  RELIABILITY  ANALYSIS  37 

VI  MODEL  VALIDATION  42 

VII  SAFETY  ANALYSIS  44 

VIII  APPENDICES 

APPENDIX  A  -  EQUIPMENT  FAILURE  RATE  INFORMATION  62 

APPENDIX  B  -  COMPUTER  PROGRAM  INFORMATION  94 


APPENDIX  C  -  EXTRACTS,  AWLS  OPERATIONAL  FLIGHT  TESTS  167 


v 


LIST  OF  ILLUSTRATIONS 


FIGURE 

PAGE 

Fig. 

1 

Total  Systems  Approach 

8 

Fig. 

2 

AWLS  System  Block  Diagram 

10 

Fig. 

3 

STACC  System  Diagram 

11 

Fig. 

4 

STACC  Logic  Diagram 

12 

Fig. 

5 

Lateral  STACC  Computation 

13 

Fig. 

6 

Longitudinal  STACC  Computation 

14 

Fig. 

7 

Landing  Sequence 

16 

Fig. 

8 

Vertical  Mode  Partition 

18 

Fig. 

9 

Lateral  Mode  Partition 

19 

Fig. 

10 

Monitor  Logic 

28 

Fig. 

11 

Schema  I  -  Localizer  Monitoring 

29 

Fig. 

12 

Reliability  Analysis  Schema  I 

30 

Fig. 

13 

Localizer  Monitoring  Schema  II 

31 

Fig. 

14 

Reliability  Analysis  Schema  II 

32 

Fig. 

15 

Glide  Slope  Monitoring  -  Schema  I 

33 

Fig. 

16 

Reliability  Analysis,  Glide  Slope,  Schema  I 

34 

Fig. 

17 

Glide  Slope  Monitoring  -  Schema  II 

35 

Fig. 

18 

Reliability  Analysis  Glide  Slope,  Schema  II 

36 

Fig. 

18a 

Rollout  Mode,  CAT  III  Adapter 

47 

Fig. 

19 

Rollout  Mode  STACC 

48 

Fig. 

20 

Go-Around  Mode 

49 

Fig. 

21 

Decision  Tree 

51 

Fig. 

23 

Attenuation  Function  -  No  Pilot 

56 

Fig. 

24 

Attenuation  Function  -  Limited  Visibility 

57 

Fig. 

25 

Runway  Speed  Profile 

59 

TABLE 

Table 

1 

ICAO  Weather  Criteria 

3 

Table 

2 

Equipment  Failure  Rate 

21 

Table 

3 

Time  Distribution  Data 

39 

Table 

4 

Reliability  Analysis  Results 

40 

Table 

5 

Sensitivity  Effects 

41 

Table 

6 

AWLS  Equipment  Failure 

43 

Table 

7 

Safety  Analysis  Results 

53 

Table 

8 

Attenuated  Safety  Analysis 

60 

vi 


SECTION  I 


INTRODUCTION 

1.  I  OBJECTIVE 

The  objective  of  the  work  reported  in  this  document  was  to  provide 
an  analytical  means  whereby  an  existing  or  proposed  airborne /ground 
guidance  system  could  be  analyzed  from  a  safety/reliability  and  risk  assess¬ 
ment  point  of  view.  A  further  objective  was  to  test  the  analytical  system 
(model)  with  actual  flight  experience  data  and  correct  it,  where  needed,  in 
order  to  increase  confidence  in  the  model. 

1,2  BACKGROUND 

The  aviation  community  and  the  FAA  have  been  working  for  many  years 
toward  the  ultimate  goal  of  all-weather  landings.  The  high  cost  of  disruptions 
to  iet  flights  caused  by  weather  diversions  has  given  impetus  to  development 
of  an  all-weather  capability  for  jet  aircraft.  The  requirements  of  the  military 
for  all-weather  operations  are  self  evident  and  of  high  priority. 

Standards  of  performance  have  been  developed  by  special  committees 
working  under  the  AWOP  (All  Weather  Operations  Panel)  of  the  ICAO  (Inter¬ 
national  Civil  Aviation  Organization).  With  the  establishment  of  ICAO  per¬ 
formance  standards  and  definition  of  approach  limitations  based  upon  decision 
height  and  runway  visual  range  (RVR),  (see  Table  I),  very  significant  developments 
have  taken  place  in  the  fields  of  guidance  and  control.  A  result  of  these  devel¬ 
opments  is  the  acceptance  of  fully  automatic  landings  which  require  total  reliance 
on  the  autopilot,  at  least  as  the  prime  system. 

Although  instrument  flight  has  progressed  to  a  remarkable  level  of  capa¬ 
bility  over  the  years,  the  attainment  of  safe  and  routine  low  visibility  landings 
is  yet  to  be  realized.  With  some  minor  exceptions,  the  currently  accepted 
operational  limitation  in  the  aviation  community  is  1200  feet  runway  visibility. 
Although  several  organizations  have  conducted  flight  test  programs  to  investigate 
this  unknown  environment  and  made  significant  contributions,  the  problem  of 
complete  all-weather  capability  has  not  been  solved. 
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In  an  effort  to  gain  more  experience  and  data  and  to  perhaps  better 
define  this  environment,  the  FAA  and  the  Air  Force  jointly  conducted  an 
All  Weather  Landing  System  (AWLS)  test  program  in  which  this  reliability/ 
safety  analysis  program  played  an  important  role. 


Table  1 


international  Civil  Aviation  Organization  Weather  Criteria 


tea°ry 

Decision  Height 

Runway  Visual  Range 

( feet) 

( feet/meters)* 

I 

200 

2600/800 

II 

100 

1200/400 

Ilia 

none 

700/200 

nib 

none 

150/50 

IIIc 

none 

0/0 

note:  While  one  meter  is  3.  280  feet,  the  above  definitions  indicate  the 

approximately  equivalent  measurements  in  feet/meters  which 
are  the  generally  accepted  values. 
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1.3  HISTORICAL  DEVELOPMENT  OF  PRESENT  PROGRAM 


FAA  interest  in  the  development  of  an  all-weather  landing  capability 
in  the  C-  141  began  early  in  the  basic  C-  141  development  program.  Initially, 
Category  II  capability  vas  of  primary  interest.  Later,  interest  was  shown  by 
the  FAA  in  the  development  of  a  Category  III  capability  in  the  C-  141  .  The 
Loekheed-Georgia  Co.  made  a  series  of  modifications  to  the  Category  II  system 
in  NC-  141A-61-2775  and,  starting  in  1968,  carried  out  a  series  of  flight  tests 
of  the  resulting  Category  III  configuration  for  the  FAA  at  the  National  Aviation 
Facility  Experimental  Center  (NAFEC),  Atlantic  City,  New  Jersey.  The  objective 
of  the  flight  tests  was  to  obtain  adequate  data  to  define  minimum  performance 
and  equipment/ requirements  criteria  for  Category  III  operations  and  to  identify 
existing  system  deficiencies  which  were  prohibiting  actual  Category  III  operations. 
The  test  is  reported  in  a  NAFEC  report,  NA-69-18  (RD=69=34),  dated  October 
1969.  At  the  termination  of  the  test  conducted  by  Lockheed,  NC-  141-61-2775 
was  delivered  to  the  Aeronautical  Systems  Division  (ASD)  at  Wright  Patterson 
Air  Force  Base,  Ohio  for  continuation  of  testing.  The  ultimate  goal  was  to 
validate  the  C-141  AWLS  for  Category  III  operation. 

Development  of  the  C-141  AWLS  was  established  as  a  joint  FAA/USAF 
effort.  The  guidelines  for  working  relations  between  the  two  organizations 
were  defined  in  Interagency  Working  Agreement,  DOT  -  FA  -  70-W  A  I-  173,  dated 
October  '969. 

The  ASD  (4950th/EN)  flight  test  program,  under  the  supervision  and 
engineering  direction  of  the  Systems  Engineering  Directorate  of  ASD,  lasted 
from  13  Dec  1969  until  11  April  1972.  The  results  of  the  program  are  reported 
in  Flight  Test  Report  ENE-72-20,  dated  14  Nov  1972.  The  flight  test  objectives 
were  never  attained  since,  as  reported,  "the  level  of  performance  of  the  C-141 
AWLS  vas  so  poor  that  the  primary  effort  during  this  period  of  testing  vas  forced 
to  be  directed,  almost  exclusively,  toward  trouble  shooting  and  correcting  AWLS 
problems."  No  conclusions  pertaining  to  the  flight  test  objectives  could  be  made. 

At  this  time,  the  responsibility  for  test  direction  and  management  was  trans¬ 
ferred  to  the  Traffic  Control  and  Landing  (TRACALS)  System  Project  Office  (SPOl 


at  the  Electronics  Systems  Division  (ESD)  at  Hanscomb  Air  Force  Base  in 
Cambridge  Mass.  At  the  request  of  ESD,  the  responsibility  for  continuing 
the  work  to  fulfill  the  agreement  with  the  FAA,  was  transferred  to  the  Flight 
Dynamics  Laboratory  at  Wright  Patterson  Air  Force  Base.  ESD  retained 
overall  mangement  responsibility. 

After  inspection  of  the  system  and  consultation  with  the  4950th  Test 
W  ing  of  ASD  and  the  FAA,  AFFDL  recommended  that  a  complete  clean-up 
and  updating  of  the  AWLS  and  aircraft  be  accomplished.  It  was  specific  that 
the  clean-up  include  at  least  the  installation  of  a  dual  inertial  system  (INS), 
installation  of  a  modern  flight  control  system,  and  the  elimination  of  all  inputs 
to  the  AWLS  from  the  C-12  compass  system  which  had  been  a  primary  source 
of  trouble. 

A  contract  was  let  to  the  Lear-Siegler,  Inc.  Contract  Maintenance  facility 
at  Mobile  Alabama  for  the  clean-up  of  the  AWLS  and  the  accomplishment  of  an 
aircraft  periodic  inspection.  The  aircraft  was  at  Mobile  for  almost  nine  months. 
The  first  flight  following  clean-up  was  on  26  Oct  1972.  After  safety-of-flight 
discrepancies  were  corrected,  the  aircraft  was  returned  to  Wright  Patterson 
Air  Force  Base  in  Nov.  1972. 

With  the  return  of  the  aircraft  to  WPAFB,  several  efforts  were  begun 
simultaneously.  The  primary  effort  was  to  optimize  the  AWLS  and  the  instru¬ 
mentation,  and  to  start  a  failure /degraded  performance  computer  simulation. 
Also,  the  integration  of  the  Maxson  Independent  Landing  Monitor  radar,  later 
referred  to  as  the  ALR,  and  the  Sperry  Electronic  Attitude  Director  Indicator 
(ALR/EADI)  was  initiated.  The  results  of  this  effort  and  the  optimization  and 
pre -experimental  flight  test  phases  are  reported  in  Technical  Memorandum 
AFFDL- TM-109-FGSA,  dated  April  1974  and  cover  the  period  1  Nov.  1972  to 
19  Feb.  1974.  It  should  be  noted,  however,  that  the  ALR/EADI  (later  called 
ILM/EADI)  equipments  were  not  used  during  the  operational  flight  tests  nor 
in  the  safety/ reliability  analysis. 

In  1974,  interest  developed  in  computer  modeling  techniques  as  a  tool 
for  saljty  and  reliability  analysis  of  the  total  ground /airborne  all  weather  landing 
system.  Various  mathematical  modeling  schemes  exist  which  deal  with  parts  of 
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the  total  ground/ airborne  system  in  assessing  safety  and  reliability.  None  have 
dealt  with  the  total  ground/airborne  system  in  a  Category  III  situation  using 
actual  data  from  Category  III  experience  to  test  and  confirm  the  modeling 
techniques. 

A  contract  was  established  with  the  University  of  Dayton  in  1974. 

The  program  is  unique  in  that  the  modeling  techniques  developed  have  been 
tested  and  adjusted  using  data  from  actual  Category  III  landing  experience 
in  a  specially  equipped  C-141  aircraft.  As  a  result,  a  total  ground/airborne 
system  computer-modeling  technique  has  been  developed,  tested  and  validated 
to  a  degree  that  it  can  be  used  with  a  high  degree  of  confidence  as  a  design 
tool  in  future  system  developements  and  risk  assessment. 
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SECTION  II 

SYSTEM  DEFINITION  AND  CONFIGURATION 

The  emphasis  in  this  reliability/ safety  analysis  stressed  a  total  systems 
concept  which  included  modeling  of  the  ground-based  Instrument  Landing  System 
(ILS)  with  monitoring,  the  airborne  control  system  used  in  the  automatic  mode 
with  the  pilot  and  crew  "in  the  loop",  and  both  safety  pilot  and  crew  procedures. 
(Figure  1).  A  few  V'ords  about  each  is  in  order. 

Due  to  the  limited  number  of  certified  Category  III  ILS  ground  installations, 
the  flight  test  program  was  planned  from  the  initial  phases  to  gain  Category  III 
weather  experience  using  Category  II  ILS  ground  installations.  A  typical 
Category  II  ILS  provides  an  oncoming  aircraft  w'ith  guidance  information  on 
height  and  ground  track  for  a  visual  take-over  by  the  pilot  at  100  feet.  There¬ 
fore,  it  v’as  necessary  for  the  airborne  control  system  of  the  test  aircraft  to 
be  modified  in  order  to  provide  additional  automatic  guidance  capabilities 
below  the  100  foot  altitude  that  are  required  for  a  Category  III  landing.  These 
additional  guidance  capabilities  would  allow  for  automatic  flare,  decrab,  and 
rollout. 

The  basic  control  system  for  the  C-141  test  aircraft  included  the  flight 
control  system  and  the  Category  II  all- weather-landing- system  (AWLS).  These 
systems  were  modified  and  augmented  to  provide  the  additional  automatic 
capabilities  necessary  for  a  Category  III  landing  using  the  previously  mentioned 
Category  II  ILS.  The  modifications  included  such  items  as  the  Sperry  350  B 
Attitude  Director  Indicators  (ADIs),  Dual  C-5  (Wilcox  800C  and  806C)  ILS 
receivers  for  glideslope,  dual  Collins  (51RV2B)  ILS  receivers  for  localizer, 
dual  flare  computers  an  updated  Test  Program  Logic  Computer  (TPLC),  and 
dual  radar  altimeters.  The  system  was  augmented  with  a  Category  III  adaptor 
(designed  and  built  by  AFFDL)  for  aircraft  functions  required  below  100  feet  and 
dual  Litton  (LTN-51)  inertial  platforms.  Also  provided  was  a  digital  data  re¬ 
cording  system,  a  test  director  s  console  with  basic  flight  instruments  to  allow' 
additional  pilots  and  engineers  to  monitor  progress  along  the  flight  profile.  In 
addition,  a  Numax  Independent  Landing  Monitor  and  a  Sperry  Electronic  Attitude 
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Director  (EADI)  were  installed  for  experimental  purposes  and  with  the 
hope  that  they  could  eventually  be  used  in  the  program.  The  Independent 
Landing  Monitor  (ILM)  provided  a  perspective  view  of  the  runway  on 
approach  and  during  landing  which  was  superimposed  on  the  Sperry  EADI 
in  such  a  way  that  the  runway  could  be  seen  as  background  to  the  steering 
information  provided  by  the  EADI.  However,  because  of  many  maintenance 
problems  with  the  ILM,  the  system  was  not  used  effectively  during  the  test 
program  and  was  not  a  part  of  the  safety/ reliability  analysis. 

A  functional  block  diagram  of  the  system  initially  used  is  illustrated  in 
Figure  2.  During  the  latter  stages  of  the  flight  test  program,  an  alternate 
system  configuration  was  evaluated.  This  configuration  employed  a  Simplified 
Terminal  Area  Control  Computer  (STAC C)  which  was  developed  as  the  first 
step  towards  replacing  the  C-141  guidance  and  control  system  with  more  ad¬ 
vanced  (digital)  avionics.  The  STACC  was  more  efficiently  designed  than  its 
counterpart  equipment  by  virtue  of  combining  functions  and  by  using  current  elec¬ 
tronics.  The  STACC  replaced  the  following  standard  C-141  avionics:  (1)  flight 
director  computers,  (2)  automatic  flight  control  system  (ATCS)  coupler,  (3)  flare 
computers.  In  addition  to  this  equipment,  the  STACC  included  circuitry  to  re¬ 
place  the  Category  III  adapter  that  converted  the  standard  C-141  Category  II 
system  into  a  Category  III  AWLS.  The  STACC  consisted  of  two  (2)  identical 
and  interchangeable  boxes  that  were  cross  monitored  and  equalized  before 
feeding  into  the  downstream  autopilot  computers.  The  equalized  output  of  one 
box  was  used  to  drive  the  autopilot  and  the  copilot  display  systems  and  the 
equalized  output  of  the  second  box  was  used  to  drive  the  pilot  and  test  director's 
display  systems.  The  STACC  system  embodiments  are  shov'n  in  Figures  3, 

4,  and  5. 
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FIGURE  2  AWLS  System  Block  Diagram 


FIGURE  3  STACC  System  Diagram 


FIGURE  5  Lateral  STACC  Computation 


SV  STEM  performance:  model 


l  he  modeling  appmach  adopted  in  this  program  was  used  for  both  the 
reliability  and  safety  analyses.  It  accommodates  the  total  systems  configur¬ 
ation  by  partitioning  the  system  into  a  set  of  time /function  related  modules. 

The  basic  airborne  control  system  is  composed  of  a  dual  automatic  system 
backed  up  by  a  manual  system.  It  presented  command  information  for  vertical 
and  lateral  control  of  the  aircraft  by  displaying  the  information  on  the  pilot  and 
copitot  attitude  director  indicators.  The  fault  monitoring  capability  of  the  system 
provides  coverage  of  failures  occurring  in  the  sensitive  (or  critical)  functions  of 
the  dual  automatic  operation.  If  a  detectable  failure  occurs  in  the  dual  automatic 
system,  the  affected  axis  (vertical  or  lateral)  is  disengaged  and  the  pilot  is 
alerted  of  the  failure.  From  a  functional  standpoint,  the  pilot  may  decide  to 
manually  fly  the  disengaged  axis  or  completely  disengage  the  automatic  system. 
However,  in  Category  III  weather,  procedures  require  that  an  immediate  go- 
around  maneuver  be  initiated  in  response  to  a  detected  system  failure. 

From  a  safety  viewpoint,  only  that  portion  of  the  landing  sequence  represent¬ 
ing  a  significant  safety  hazard  had  to  be  modeled  in  the  analysis.  This  critical 
portion  of  the  landing  sequence  is  shown  diagrammatically  in  Figure  7.  It  may 
he  observed  that  the  critical  landing  sequence  is  divided  into  four  discrete  and 
.  ontiguous  time  intervals:  (  1)  flare  engage  to  decrab  engage,  (2)  decrab  engage 
In  touchdown,  (3)  touchdown  to  wheel  spin-up  and  (4)  rollout. 

Guidance  signals  from  the  ground  based  instrument  landing  system  (ILS) 
were  provided  via  a  localizer  radio  frequency  beam  for  lateral  control  and  via 
a  glide  slope  radio  frequency  beam  for  vertical  control.  The  localizer  and  glide 
slope  transmitting  systems  are  physically  separate  and  independent  from  each 
othe  r . 

The  first  logical  partition  of  our  systems  model  was  to  separate  the  vertical 
and  lateral  control  functions  for  the  airborne  control  system  and  the  ILS.  Once 
these  partitions  were  defined,  the  specific  system  functions  and  crew  procedures 
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FIGURE  7  Landing  Sequence 


'» t 

were  related  to  their  respective  partition.  The  actual  process  of  relating 
system  functions,  procedures,  and  equipments  to  the  partitioned  lateral  and 
vertical  axes  was  used  to  analyze  the  approach  and  landing  sequence  in 
otisicierable  detail.  The  '  esults  of  this  analysis  revealed  that  certain  equip¬ 
ments  or  functions  were  only  used  during  specific  segments  of  the  landing 
sequence,  while  other  equipments  were  essential  during  the  entire  approach  and 
landing  sequence. 

The  equipment  utilization  for  the  vertical  and  lateral  partitions  is  illustrated 
iii  Figures  8  and  9  respectively.  This  equipment  utilization  information  was 
integrated  to  represent  the  total  equipment  utilization  or  operation  for  the  air¬ 
borne  control  system  as  a  function  of  aircraft  progression  through  the  landing 
sequence. 

The  next  step  in  the  analysis  sequence  was  to  develop  a  mathematical  model 
to  represent  the  reliability  of  the  airborne  control  system  and  procedures. 

Fssential  to  this  model  was  a  compilation  of  the  equipment  failure  characteristics. 

The  majority  of  the  equipment  in  the  airborne  control  system  has  had  ex¬ 
tensive  fleet  exposure.  Failure  rate  data  for  the  standard  C-141  equipment  was 
obtained  from  C-141  shop  maintenance  records  for  a  one  year  period  from  May 
1974  to  April  1975.  Wilcox  (800C  and  806C)  ILS  receivers,  identical  to  those 
used  on  the  test  aircraft,  are  currently  being  used  on  the  C-5  and  their  failure 
rate  data  was  obtained  from  the  C-5  fleet  maintenance  records  for  a  six  month 
period  from  April  1975  through  September  1975.  It  is  assumed  that  by  using 
a  sufficient  data  base,  the  effect  of  time  lags,  between  flight-line  remove  and 
replace  actions  and  shop  repair  actions,  on  maintenance  records  could  be 
minimized.  Failure  rate  information  for  the  Sperry  350B  Attitude  Director 
Indicators,  Litton  LTN-51  Inertial  Platforms,  and  the  Collins  51RV2B  ILS 
Receivers  was  not  readily  available  from  military  fleet  maintenance  records 
and  was  obtained  from  the  respective  manufacturers.  The  custom-built  Category 
III  Adapter  and  Runway  Distance  Remaining  Indicator  failure  rate  data  was 
obtained  from  the  flight  log  and  maintenance  records  for  the  test  aircraft. 

Failure  rate  data  for  the  Simplified  Terminal  Area  Control  Computer  (STACC) 
was  estimated  from  similar  equipment. 
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FIGURE  8  Vertical  Mode  Partition 


FIGURE  9  Lateral  Mode  Partition 


The  first  generation  calculations  of  the  failure  rates  for  the  equipment 
was  at  the  so-called  box  level  with  items  such  as  accelerometers,  trans¬ 
mitters,  etc,,  which  furnish  pertinent  information  to  the  various  pieces  of 
equipment,  included  in  their  respective  box  level  calculations.  This  box 
level  failure  rate  information  is  presented  in  Table  2.  In  most  instances  the 
box  level  failure  rates  were  apportioned  down  to  the  so-called  card  level 
(second  generation)  by  evaluating  the  on-equipment  maintenance  actions  with 
respect  to  the  card  level  shop  repairs.  An  itemized  summary  of  the  card 
level  failure  rates  is  included  in  Appendix  A. 

A  few  basic  assumptions  regarding  the  equipment  failure  rates  were 
invoked.  First  of  all,  each  piece  of  equipment  was  assumed  to  be  independent 
and,  secondly,  possess  a  constant  hazard  rate.  The  constant  hazard  rate 
assumption  implies  an  exponential  distribution  of  inter-failure  times  (or  a 
Poisson  process)  and  is  considered  very  common  place  for  electronic  type 
equipment. 
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Table  2 


EQUIPMENT  FAILURE  RATE  INFORMATION 


Equipment 

Failure  Rate  (failures/hour) 

MTBF  (hours) 

AFCS  Aileron  Servo 

0. 000366 

2732. 240 

AFCS  Control  Panel 

0.001584 

631. 305 

AFCS  Coupler 

0. 006054 

165. 180 

AFCS  Elevator  Servo 

0.000126 

7936.  508 

AFCS  Rudder  Servo 

0.002348 

425. 894 

Aileron  Computer 

0. 002773 

360. 620 

Attitude  Director  Indicator 

0.  009636 

103.  778 

Automatic  Throttle  Computer 

0.  001396 

716.  332 

Category  III  Adapter 

0.008895 

112. 423 

Central  Air  Data  Computer  System 

0.024055 

41.  571 

Elevator  Computer 

0.003641 

274. 650 

Flare  Computer 

0.001558 

641. 849 

Flight  Director  Computer 

0.001017 

983. 284 

Glideslope  Receiver 

0.002003 

499. 251 

Horizontal  Situation  Indicator 

0.002910 

343. 643 

Inertial  Navigation  System 

0.000968 

1033. 058 

Master  Caution  Controller 

0.001596 

626.  566 

Navigation  Receiver 

0.000678 

1474.  926 

Navigation  Selector 

0.001368 

730.994 

Pitch  Attitude  Gyro 

0. 002621 

381. 534 

Pitch  Rate  Gyro 

0.000650 

1538. 462 

Radar  Indicator 

0.002028 

493. 097 

Radar  Receiver  Transmitter  Unit 

0.004262 

234. 682 

Roll  Rate  Gyro 

0. 000650 

1538. 462 

Rotate  and  Go- A  round  Computer 

0.002927 

341. 647 

Runway  Distance  Remaining 

0. 005438  ' 

183.900 

Indicator 

Simplified  Terminal  Area 

0. 005059 

197.668 

Control  Computer 

Test  Programmer  and  Logic 

0. 002452 

407. 830 

Computer 

Vertical  Gyro 

0.002621 

381.  543 

YAW  Damper  Computer 

0.003289 

304. 044 

A  few  words  about  each  assumption  are  in  order.  By  assuming  a 
Poisson  process,  the  individual  equipment  failure  rates  (X)  and  hazard 
rates  (Z.(t))  are  essentially  constant  and  equivalent.  Therefore,  the 
mean  time  betv’een  failures  (MTBF)  and  the  reliability  function  (R(t)) 
for  each  piece  of  equipment  can  be  described  as  follows: 

R(t)  =  exp  £-Jq  Z(j>  )  d  3  J 
-Xt 

=  e 

vhere  t  =  operational  time  interval 

and  MTBF  -  f'°R(t)  dt  =  /*VKtd  T 
*  o  J  o 

1 

X 


Earlier  it  was  pointed  out  that  procedures  required  a  go-around 
in  response  to  a  detected  system  failure  during  a  Category  III  weather 
landing.  This  means  that  the  failure  of  a  single  piece  of  required 
operational  equipment  would  cause  the  landing  sequence  to  be  aborted 
and  a  go-around  initiated.  Now'  when  this  requirement  is  examined  with 
the  assumption  of  equipment  independency,  it  is  evident,  from  an  essen¬ 
tiality  standpoint,  that  we  are  modeling  a  series  structure.  The  reliability 
or  probability  of  successfully  completing  the  landing  sequence  was  represent¬ 


ed  as  follows: 


R(t)  =  Jl  e  i  = 

i=  1 


-  (.S.  Xj)t 
=  e  i=  1 


W'here  X^  =  failure  rate  for  equipment  (i) 
and  t  =  operational  time  interval. 

The  Poisson  process  has  an  additional  feature  relative  to  it's  "lack  of 
memory".  Specifically,  since  the  hazard  rate  is  constant,  each  piece  of 
equipment  is  just  as  likely  to  fail  at  time  ' t'  as  it  is  to  fail  at  time  ' tT  + 
delta  * t' .  This  effectively  gives  license  to  reset  time  to  zero  after  each 
confirmation  of  successful  performance.  In  our  model  the  first  comprehensive 
indication  that  all  systems  are  operational  occurs  at  the  completion  of  the 
diagnostic  pre-land  test  and  is  annunciated  at  the  approach  arm.  Prior  to  the 
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pre-land  test  annunciation,  selected  latent  failures  on  portions  of  the  operating 
but  non-functional  equipment  could  be  detected  but  not  get  annunciated.  There¬ 
fore,  for  these  reasons  the  model  validation  process  was  restricted  to  the 
approach  and  landing  sequence  from  approach  arm  through  rollout. 


SECTION  IV 


GROUND  SYSTEM  DISCUSSION  * 

As  mentioned  under  System  Definition  and  Configuration,  the  flight 
test  program  used  a  Category  II  ILS  ground  facility  to  gain  Category  III 
experience  by  adding  additional  automatic  guidance  capabilities  below  100 
feet  to  the  aircraft  control  system.  The  study,  however,  included  model¬ 
ing  a  Category  III  ILS  with  Traveling  Wave  Antenna  and  examined  two 
specified  techniques  for  redundant  real-time  integral  monitoring. 

A  Category  III  ILS  provides  aircraft  with  guidance  information  from  the 
coverage  limit  of  the  facility  to  and  along  the  surface  of  the  runway.  The 
system  analyzed  had  operational  performance  of  Category  III,  that  is,  operation 
with  no  decision  height  limitation.  Initially,  the  system  was  used  in  Category 
IIIA  operations  in  which  use  was  made  of  external  visual  references  during  the 
final  phases  of  landing  with  runway  visual  range  (RVR)  of  not  less  than  700 
feet.  As  the  flight  test  program  progressed,  both  Category  II  and  Category 
III  facilities  were  used  at  various  locations  throughout  the  country.  Fourteen 
landings  were  made  in  reported  RVRs  of  zero. 

The  ILS  basically  consists  of  two  separate  stations,  the  localizer 
and  the  glideslope.  In  addition  to  these  stations,  a  central  point  for  station 
control  and  the  display  of  station  status  exists  at  the  control  tower.  Up  to 
three  marker  beacons  are  also  used  in  a  typical  ILS  installation.  The  local¬ 
izer  provides  guidance  in  the  horizontal  plane  and  the  glideslope  station  pro¬ 
vides  guidance  in  the  vertical  plane. 

The  localizer  antenna  group  radiates  two  VHF  carriers,  each  amplitude 
modulated  by  90  and  150  Hz  and  with  both  carrier  frequencies  within  a  particular 
VHF  channel.  The  radiation  field  pattern  of  one  carrier  produces  a  course 
sector  which  radiates  +_  10  degrees  either  side  of  the  runway  center  line  and  the 
other  produces  a  clearance  radiation  field  pattern  outside  that  sector  to  _+  60 

degrees  from  the  course  line. 

The  glideslope  station  produces  a  UHF  composite  field  radiation  pattern 
that  provides  a  straight  line  descent  path  in  the  vertical  plane  and  a  clearance 
pattern  to  provide  low  angle  coverage.  Both  carriers  (course  and  clearance) 
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are  v'ithin  a  particular  UHF  channel.  Again,  90  and  150  Hz  tones  are  used 
with  the  150  Hz  tone  predominating  below  the  path  angle  and  the  90  Hz  tone 
predominating  above  the  path  angle.  The  low  angle  clearance,  radiated  by 
the  second  carrier,  is  provided  by  a  150  Hz  tone. 

There  are  two  transmitter  sections  incorporated  into  the  localizer 
station.  One  transmitter  is  designated  as  the  main  transmitter:  the  other 
is  designated  the  standby  transmitter.  The  output  signals  from  the  main 
and  standby  transmitting  units  are  routed  to  a  changeover  and  test  unit 
where  transmitter  transfer  capabilities  are  accomplished.  The  signals  re¬ 
ceived  from  the  control  unit  determine  which  transmitter  operates  into  the 
antenna,  the  main  or  standby.  When  the  main  transmitter  is  connected  to  the 
antenna  system,  the  standby  transmitter  operates  into  dummy  loads.  When  the 
standby  unit  is  connected  to  the  antenna  system,  the  main  unit  is  turned  off. 

Within  the  changeover  and  test  unit,  there  exists  circuitry  for  use  in  monitor¬ 
ing  standby  transmitter  parameters. 

The  glideslope  station  is  very  similar  to  that  of  the  localizer.  Some 
major  differences  are: 

(  1)  The  glideslope  does  not  possess  either  a  far  field  monitor  or 

an  identification  unit/monitors. 

(2)  The  glideslope  antenna  depends  on  the  ground  plane  to  form  the 

radiation  pattern. 

(3)  Triplicate  near- field  monitors  are  used  for  the  glideslope. 

(4)  No  shutdown  alert  warning  signal  is  provided. 

The  changeover  and  test  unit  provides  the  same  function  as  that  of  the 
localizer:  transfer  transmitter  signals  of  the  main  and  standby  unit  into 
either  the  antenna  systems  (including  distribution  circuits)  or  dummy  loads. 

Also  within  the  changeover  and  test  unit,  there  exists  circuitry  for  monitoring 
the  standby  transmitter  parameters. 

The  far-field  monitor  has  its  own  alarm  processing  circuitry  to  minimize 
the  quantity  of  telephone  lines  needed  for  remote  transmission.  Each  far  field 
monitor  channel  provides  two  alarm  outputs,  a  Category  III  alarm  and  a  Category 
II  alarm.  The  difference  between  these  two  alarm  outputs  is  merely  in  tolerance 
limits. 
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In  order  to  know  the  true  integrity  of  the  signal  in  space  at  all  times, 
integral  monitoring  along  with  localizer  far-field  and  glideslope  near-field 
detectors,  are  used.  Out-of-tolerance  radiation  must  be  limited  without 
limiting  system  performance. 

Integral  monitoring  is  accomplished  by  use  of  detectors  which  sample 
the  localizer  and  glideslope  radiation  in  very  close  proximity  to  each  excited 
element.  These  proximity  detectors  are  thus  insensitive  to  the  effects  of 
environmental  conditions  or  aircraft  overflights.  The  detected  signals  are 
then  combined  to  correspond  to  the  signal  received  by  the  approaching  aircraft 
in  the  far-field  of  the  transmitting  antenna.  Glideslope  near-field  detectors 
have  been  retained  for  monitoring  radiated  signals,  but  are  considered  to  serve 
only  a  secondary  role.  The  localizer  far-field  monitor  will  guard  against 
substandard  system  perfomance  from  major  obstructions  moving  in  front' of 
the  localizer  structure.  Monitor  redundancy  is  used  to  achieve  the  desired 
level  of  monitor  reliability. 

Two  specified  schemes  of  monitoring  logic  were  analyzed  for  safety/relia¬ 
bility  and  risk.  As  shown  in  Figure  10,  the  monitoring  process  demodulates 
the  monitor  inputs  into  three  components: 

(1)  Radio  Frequency  Energy  (R  F) 

(2)  Difference  in  Depth  Modulation  (DDM),  and 

(3)  Sum  of  Depth  Modulation  (SDM) 

Within  the  monitoring  system,  each  of  these  components  is  compared  with  a 
standard  established  by  ICAO  and  the  FAA.  A  measured  quantity  outside  the 
set  boundary  conditions  will  result  in  logic  of  "  1"  to  the  central  control 
indicating  an  "out-of-tolerance  condition". 

Scheme  I  shows  the  monitored  parameters  (RF,  DDM,  SDM)  and  their 
logic  levels  fed  to  a  NAND  gate  within  each  of  three  integral  monitor  boxes. 

The  outputs  of  each  of  these  three  NAND  gates  are  compared  within  the  voter 
wherein  at  least  2  of  the  three  must  be  "good". 

In  Scheme  II,  the  three  components  (RD,  DDM,  SDM)  from  each  of  three 
integral  monitors  are  not  fed  to  a  NAND  gate  but  are  sent  to  a  voter  where 
at  least  2  of  the  three  outputs  of  each  must  be  correct. 
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Figure  11  presents  the  signal  flow  diagram  for  the  monitored  information 
when  the  main  localizer  transmitter  radiates  into  the  antenna.  Corresponding 
reliability  diagram,  along  with  the  associated  reliability  equation  and  attendant 
failure  rates  are  presented  in  Figure  12.  Both  of  these  are  for  Scheme  I. 

The  analogous  localizer  information  for  Scheme  II  is  in  Figure  13:  the 
corresponding  reliability  diagram,  equations  and  failure  rates  are  given  in 
Figure  14. 

Analogously,  the  glideslope  information  for  Scheme  I  is  given  in  Figure  15 
and  Figure  16. 

Under  the  assumption  of  a  constant  hazard  function  and  independence  of 
failure  rates,  reliabilities  were  calculated  using  a  double  precision  computer 
program.  The  analysis  showed  Scheme  I  to  be  preferred  with  scheduled  pre¬ 
ventative  maintenance:  without  such  maintenance,  Scheme  II  would,  after  a 
period  of  time,  have  a  higher  reliability.  Both  ensure  overall  reliability  and 
safety. 


*Note:  Above  information  extracted  from  Mathematical  Modeling  of  Monitoring 
Concepts  by  Fuchs  and  Fileccia,  1975. 
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FIGURE  II  Schema  I  -  Localizer  Monitoring 
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FIGURE  12  Reliability  Analysis  Schema  I 


Localizer  Monitoring  Schema  II 
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FIGURE  14  Reliability  Analysis  Schema  II 


FIGURE  15  Glide  Slope  Monitoring  -  Schema  I 
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SECTION  V 


RELIABILITY  ANALYSIS 


Complete  reliability  analyses,  based  on  the  discussion  in  the  previous 
section,  were  formulated  for  the  two  system  configurations  based  on  the 
Category  III  adapter  and  the  STACC.  These  analyses  were  programmed  for 
use  on  the  WPAFB  CDC-6600  computer  system.  Each  computer  program 
calculated  the  reliability  or  probability  of  successfully  completing  each  model 
segment  of  the  landing  sequence  and  also  composite  probability  values  for  (a) 
the  completion  of  the  entire  landing  sequence  from  localizer  capture  through 
rollout  and  (b)  the  completion  of  the  landing  sequence  subsequent  to  the  approach 
arm.  The  details  of  these  computer  programs  (  including  listings)  are  present¬ 
ed  in  Appendix  B. 

One  of  the  significant  features  of  the  programs  is  that  they  provide  for 
a  sensitivity  analysis  capability  to  determine  the  variability  effects  relative 
to  (a)  the  time  intervals  for  each  model  segment  and  (b)  the  individual  equip¬ 
ment  MTBF  values.  The  sensitivity  analyses  were  based  on  Monte  Carlo 
simlulation  techniques  which  require  process  generators  to  be  used  to  provide 
random  sample  values  for  the  individual  equipment  MTBF  values  and  landing 
segment  time  values  during  each  iteration  of  the  simulation.  These  sample 
values  for  MTBF  and  time  were  employed  to  determine  the  reliability  (or 
probability  of  success)  for  each  interval  of  landing  sequence.  By  running  the 
simulation  for  a  large  number  of  iterations,  the  sensitivity  effects  of  MTBF 
and  time  on  reliability  were  determined  along  with  the  inherent  variability 
(or  risk)  associated  with  the  reliability  values. 

At  this  point  it  is  appropriate  to  discuss  the  process  generators  employ¬ 
ed  in  this  Monte  Carlo  simulation.  The  indivudual  process  generators  for 

equipment  MTBF  were  assumed  to  follow  uniform  distributions  with  the  limits 
of  variability  set  at  plus  and  minus  ten  percent  from  the  nominal  values  listed 

in  Table  2.  Part  of  the  rational  for  choosing  a  uniform  distribution  for  equip¬ 
ment  MTBF  was  to  accentuate  the  variability  effects  on  the  attendant  reliability 
calculations.  The  process  generators  for  the  time  intervals  of  the  landing 
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sequence  in  Figure  7,  were  based  on  the  individual  time  distributions  from 
operational  flight  test  data.  This  data  indicated  that  the  time  distributions 
could  be  adequately  represented  by  a  series  of  normal  distributions  with 
the  values  for  the  mean  [jlA.)  and  standard  deviation  ( f~)  listed  in  Table  3. 

The  mathematics  for  both  of  these  process  generators  is  completely  described 
in  Appendix  B.  The  completed  computer  programs  were  employed  to  determine 
the  system  reliability  information.  The  reliability  analyses  results  showing 
the  influence  of  landing  sequence  time  variability  and  equipment  MTBF  variability 
were  determined  and  are  presented  in  Table  4.  The  results  for  the  system 
configuration  based  on  the  STACC  are  superior  in  each  interval  of  the  landing 
sequence.  This  difference  was  attributable  to  the  fact  that  the  STACC  replaced 
several  individual  pieces  of  equipment  and  resulted  in  a  lower  overall  system 
failure  rate. 

Additional  computer  runs  were  made  to  determine  if  landing  segment 
time  variability  or  equipment  MTBF  variability  was  more  significant  with 
respect  to  the  overall  system  reliability.  In  order  to  accomplish  this  task  the 
time  and  MTBF  parameters  were  varied  sequentially  between  zero  variability 
and  the  nominal  variability  values  previously  discussed.  This  resulted  in  four 
sets  of  computer  runs  for  each  system  configuration.  For  the  system  config¬ 
uration  based  on  the  Category  III  adapter  the  results  in  Table  5  for  the  reliability 
from  the  approach  arm  to  runway  stop  were  obtained.  From  this  data  it  is 
evident  that  both  the  time  and  MTBF  variability  affect  the  attendant  reliability. 
However,  the  effect  of  MTBF  variability  is  slightly  more  significant  than  the 
effect  of  time  variability.  This  point  is  illustrative  of  the  need  to  design  and 
develop  flight  control  systems  with  a  minimum  and  controlled  failure  rate. 

It  should  again  be  mentioned  that  a  complete  set  of  computer  printouts 
are  provided  in  Appendix  B, 
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Table  3 


Time  Segment 

TIME  DISTRIBUTION  DATA 

Mean 
{ seconds) 

Standard  Deviation 
( seconds) 

localizer  capture  to 

arm  glideslope 

210* 

. . 

arm  glideslope  to 

glideslope  capture 

30* 

— 

preland  test 

30* 

— 

1000  feet  to  100  feet 

81.5  4** 

1.95** 

100  feet  to  flare  engage 

5.  35 

0.  42 

flare  engage  to  decrab 

3.07 

0.33 

decrab  to  wheel  spin-up 

4.02 

0.  33 

wheel  spin- up  to  stop 

22,73 

0.  53 

*  point  estimate 

**  extrapolated  from  recorded  data  for  200  foot  to  150  foot  segment 


Note: 


The  mean  and  standard  deviation  values  were  obtained  from 
recorded  data  for  Missions  171,  175,  179,  and  185. 


Table  4  RELIABILITY  ANALYSIS  RESULTS 


Localizer  Capture  to  Arm  Glideslope 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Arm  Glideslope  to  Glideslope  Capture 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Glideslope  Capture  to  Approach  Arm 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Approach  Arm  to  Land  Arm  ( 100  Feet) 

Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Land  Arm  (100  Feet)  to  Flare  Engage  (45  Feet) 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Flare  Engage  (45  Feet)  to  Decrab  (20  Feet) 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Decrab  (20  Feet)  to  Touchdown 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Touchdown  to  Stop 

Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Total  Reliability  From  Approach  Arm  to  Stop 
Mean  of  Reliability 
Std.  Dev.  of  Reliability 

Total  Reliability  For  Complete  Model 
Mean  of  Reliability 
Std.  Dev.  of  R eliability 


Category  III 
Adapter 

STACC 

.  9958494 
.  0000683 

.9964784 
. 0000611 

.  9993891 
. 0000098 

.9994794 
. 0000088 

.  9993570 
.0000100 

. 9994474 
. 0000088 

.9978379 
.  0000377 

. 9980751 
. 0000412 

•  9998851 
. 0000074 

•9998733 

.0000067 

.9999203 
. 0000057 

.9999293 
. 0000048 

.9998935 
. 0000054 

.9999072 
. 0000042 

. 9995344 
. 0000108 

. 9995604 
. 0000087 

. 9970431 
. 0000684 

. 9973469 
. 0000712 

. 9916602 
. 0001786 

. 9927685 
. 0001700 

Sul 


SECTION  VI 


MODEL  VALIDATION 


The  only  way  to  accurately  determine  if  the  reliability  model  calculations 
were  credible  was  to  compare  them  to  the  operational  flight  history  for  the 
test  aircraft.  Since  the  Category  III  adapter  system  configuration  was  the  only 
one  to  have  a  large  operational  exposure,  it  was  selected  as  the  vehicle  for 
possible  model  validation. 

The  operational  data  for  model  validation  was  obtained  by  examining 
the  flight  log  and  maintenance  records  for  the  test  aircraft.  Information  on 
205  automatic  approach/landings  made  during  mission  116  to  159  produced 
the  confirmed  failures  listed  in  Table  6.  This  table  shows  that  six  failures 
occurred  during  the  205  approach/landings.  However,  since  the  only  compre¬ 
hensive  confirmation  of  acceptable  system  performance  is  the  preland  test 
(initiated  at  glideslope  capture  and  completed  at  Approach  Arm),  the  exact 
times  of  failures  occurring  prior  to  the  preland  test  could  not  be  accurately 
determined.  This  effectively  reduces  the  number  of  useable  failure  rate  data 
down  to  1  failure  for  200  automatic  approach/landings.  Thus,  for  the  205 
automatic  approach/landings  reviewed  in  the  analysis,  only  1  failure  occurred 
after  the  Approach  Arm.  This  can  be  compared  to  the  model  predicted  reliability 
of  0.9970431  (  see  Table  4)  or  comparatively  0.  61  failures  for  the  205  automatic 
approach /landings.  This  very  close  agreement  between  the  actual  and  model 
predicted  number  of  failures  serves  to  demonstrate  a  rigorous  validation  of  the 
basic  reliability  modeling  techniques. 
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SECTION  VII 


SAFETY  ANALYSIS 


The  safety  analyses  were  based  on  a  total  systems  concept  as  outlined 
earlier  in  the  section  on  the  "Systems  Performance  Model."  A  separate 
analysis  was  performed  on  each  respective  system  configuration  (i.  e. , 

Category  III  Adapter  and  STACC).  These  analyses  were  combined  with 
respective  reliability  analysis  programs  for  use  on  the  WPAFB  CDC-6600 
computer  system. 

While  the  complete  landing  sequence  (Figure  7  and  8)  was  modeled  in 
the  reliability  analysis,  the  safety  analysis  modeling  was  restricted  to  that 
portion  of  the  landing  sequence  which  resulted  in  a  significant  hazard  to 
safety  for  the  test  aircraft.  After  much  discussion  with  the  test  pilots  and 
systems  support  personnel,  the  general  consensus  was  that  the  test  aircraft 
could  complete  a  successful  go-around  in  response  to  any  airborne  control 
system  or  ILS  failure  prior  to  flare  engage.  It  was  estimated  that  the  critical 
time  for  the  go-around  maneuver  was  approximately  3  seconds.  This  would 
allow  the  pilots  enough  time  to  make  the  required  go-around  control  changes 
and  arrest  the  sink  rate  of  the  aircraft  for  climb-out.  Thus  the  safety  analysis 
need  only  model  the  critical  sequence  from  flare  engage  through  rollout  (see 
Figure  7). 

From  Figure  7,  the  critical  portion  of  the  landing  sequence  was  composed 
of  four  separate  time  intervals:  (1)  flare  engage  to  decrab,  (2)  decrab  engage 
to  touchdown,  (3)  touchdown  to  wheel  spin- up,  and  (4)  rollout.  In  order  to 
understand  the  safety  modeling  approach,  the  basic  sequence  of  events  associated 
with  each  of  the  four  time  intervals  will  be  examined.  Prior  to  flare  engage, 
the  aircraft  is  following  the  guidance  provided  by  the  ground  based  Category 
III  ILS.  The  ILS  guidance  is  provided  via  a  localizer  radio  frequency  beam  for 
lateral  control  and  via  a  glideslope  beam  for  vertical  control.  At  the  point  of 
flare  engagement  the  aircraft  deviates  from  glideslope  pafit  and  begins  a  manea- 
ver  which  allows  it  to  flare  out  parallel  to  the  runway.  This  is  accomplished  by 
maintaining  an  active  localizer  control  and  disengaging  the  glideslope  control. 
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The  vertical  guidance  is  then  provided  by  the  flare  computers  internal  to 
the  automatic  flight  control  system.  During  the  decrab  maneuver,  any 
heading  corrections  for  cross  winds  are  removed  and  the  aircraft  is  align¬ 
ed  with  the  runway.  This  is  accomplished  by  removing  the  localizer  control 
and  maintaining  correct  attitude  control  of  the  aircraft  strictly  through  the 
use  of  computers  internal  to  the  automatic  flight  control  system.  The  point 
of  touchdown  is  self-explanatory  and  the  aircraft  control  system  continues  to 
maintain  active  control  at  this  point.  Finally,  the  rollout  mode  is  engaged  at 
the  point  of  wheel  spin- up,  which  occurs  when  the  wheels  reach  a  speed  of  60 
knots.  From  a  procedural  standpoint,  if  wheel  spin-up  is  not  detected,  an 
immediate  go-around  is  initiated.  For  rollout,  the  localizer  or  horizontal 
control  is  re-engaged  for  lateral  guidance  purposes.  If  either  the  ground  based 
localizer  system  or  the  aircraft  localizer  receivers  fail  between  the  time  of 
localizer  disengagement  at  decrab  and  localizer  re-engagement  at  wheel  spin- 
up,  the  back-up  rollout  mode  would  be  engaged  at  wheel  spin-up  rather  than 
the  primary  rollout  mode.  The  back-up  rollout  mode  uses  preset  heading 
information  from  the  inertial  navigation  system  (INS)  rather  than  the  localizer 
(Kef.  5). 

From  this  discussion,  it  is  evident  that  the  safety  analysis  is  merely  an 
extension  of  the  reliability  analysis  in  terms  of  the  basic  system  modeling 
approach  with  the  analysis  based  on  model  segments  and  their  respective  equip¬ 
ment  utilization  factors.  However,  the  purpose  of  the  safety  analysis  was  to 
complement  the  reliability  analysis  and  breakdown  the  system  unreliability  to 
determine  how  much  of  this  unreliability  represented  a  hazard  to  the  system 
operation.  The  key  to  breaking  down  this  unreliability  was  directly  tied  to  the 
identification  of  the  minimum  set  of  critical  equipment  necessary  for  the  system 
to  recover  from  an  equipment  failure.  This  equipment  was  identified  through 
numerous  discussions  with  the  test  pilots  and  system  support  personnel.  Specifi¬ 
cally.  the  critical  equipment  was  related  to  the  control  functions  required  for  a 
successful  go-around  maneuver  and  a  successful  rollout  maneuver.  If  any  system 
failure  occurred  prior  to  wheel  spin-up,  procedures  dictate  an  immediate  go- 
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around.  Thus  the  capability  for  a  successful  go-around  is  crucial  to  the 
system  safety  prior  to  wheel  spin-up.  It  was  also  determined  that  if  a 
failure  occurred  after  wheel  spin-up,  the  test  aircraft  was  required, 
through  procedure,  to  stay  on  the  ground.  This  makes  the  primary  and  back¬ 
up  rollout  capabilities  crucial  to  system  safety  subsequent  to  wheel  spin-up. 

The  minimum  sets  of  critical  equipment,  for  both  system  configurations  are 
presented  in  Figures  18,  19  and  20.  In  Figure  20,  the  set  of  critical  equip¬ 
ment  for  a  go-around  maneuver  is  shown  with  three  sets  of  guidance  sensors. 
The  dual  INS  is  the  primary  set  of  sensors.  If  either  one  or  both  of  the  INS 
failed,  it  was  assumed  that  there  would  not  be  sufficient  time  to  manually 
switch-in  either  the  roll  and  pitch  gyros  or  the  vertical  gyro  because  of  the 
proximity  of  the  aircraft  to  the  runway. 

The  next  step  in  the  safety  analysis  was  to  combine  the  calculated  relia¬ 
bility  information  with  failure  probabilities  for  the  respective  sets  of  critical 
equipment  in  order  to  determine  which  combinations  of  single  and  multiple 
failures  would  represent  a  hazard  to  system  safety.  This  was  effectively  ac¬ 
complished  by  using  a  decision  tree  (or  fault  tree)  approach  where  the  combined 
effects  of  the  airborne  control  system  and  the  ground  ILS  were  represented  in 
composite  form.  The  general  categories  of  failures  included  in  the  decision  tree 
are  as  follows: 

Ground  ILS  -  operational 
-  failed 

Airborne  control  system  -  operational 

-  either  pilot  or  copilot  channel  of  information  lost  due  to  critical  failure 

-  both  pilot  and  copilot  channels  of  information  lost  due  to  critical  failures 

-  wheel  spin- up  not  detected  due  to  failure 

-  non- critical  failure 

The  specific  relationships  of  equipment  operation  and/or  failure  were 
represented  for  each  segment  of  the  landing  sequence.  Figures  21  and  22 
describe  the  resulting  decision  tree  developed  for  this  analysis. 

Each  distinctive  path  through  the  tree  represents  the  specific  occurrence 
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CRITICAL  EQUIPMENT  FOR  ROLLOUT  MODE  (CATEGORY  III  ADAPTER) 
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CRITICAL  EQUIPMENT  FOR  ROLLOUT  MODE  (STACC) 


FROM  \ 
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BUSS  • 


CRITICAL  EQUIPMENT  FOR  GO -AROUND 


of  a  combination  of  events.  The  individual  paths  can  be  subdivided  into  a 
series  of  branches  (or  limb)  which  represent  the  various  events.  For 
example^  the  probability  of  successful  operation  (or  reliability)  for  the  total 
system  would  be  represented  by  the  bottom  path  through  the  tree. 

It  was  the  purpose  of  the  safety  analysis  to  determine  which  of  the  paths 
through  the  tree  were  hazardous  to  the  overall  system  performance.  These 
hazardous  paths  were  represented  by  paths  or  branches  which  terminated  in 
a  loss  of  valid  information  to  both  the  pilot  and  copilot.  There  was  a  total  of 
seventeen  such  hazardous  paths  through  the  tree.  Finally,  the  total  hazard 
to  safety  for  the  system  was  obtained  by  summing  the  individual  probabilities 
of  the  seventeen  hazardous  paths.  The  other  paths  were  grouped  into  categories 
for  summarization. 

As  stated  earlier,  the  safety  analysis  computations  were  jointly  programmed 
with  the  reliability  analysis.  Thus,  there  were  safety  analyses  for  both  system 
configurations  with  each  configuration  having  four  separate  computer  runs  to 
study  the  variant  effects  of  equipment  MTBF  and  landing  sequence  time.  The 
safety  analysis  results  showing  the  influence  of  landing  sequence  time  varia¬ 
bility  and  equipment  MTBF  variability  were  determined  and  are  presented  in 
Table  7.  The  results  for  the  two  system  configurations  are  similar  except  for 
the  calculated  hazard  to  safety.  Here  the  STACC  configuration  shows  a  hazard 
to  3afey  that  is  approximately  six  orders  of  magnitude  better  than  for  Category 
III  adapter  configuration.  This  dramatic  improvement  in  the  safety  calculations 
was  attributable  to  the  replacement  of  the  Category  HI  adapter,  which  was 
essentially  a  single  point  failure,  with  the  dual  redundant  STACC  (see  Figures 
18  and  19). 

Upon  further  study  of  the  hazards  to  safety,  it  was  revealed  that  the 
original  model  needed  some  refinements.  Specifically,  the  original  model 
assumed  that  the  criticality  of  equipment  failures  occurring  during  rollout 
were  evenly  weighted  regardless  of  where  they  occurred  during  rollout.  Said 
another  way,  the  criticality  of  a  failure  at  120  knots  was  assumed  to  be  equiv¬ 
alent  to  the  criticality  of  the  same  failure  at  20  knots.  This  is  obviously  an 
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erroneous  assumption.  In  order  to  achieve  a  more  realistic  modeling  approach 
additional  discussions  with  the  test  pilots  and  system  support  personnel  were 
conducted.  The  results  of  these  discussions  produced  two  separate  attenuation 
functions  designed  specifically  to  weight  the  criticality  of  equipment  failures 
as  a  function  of  the  aircraft  ground  speed  and  pilot  visibility  conditions.  The 
first  attenuation  function  (Figure  23)  was  developed  for  a  fully  automatic  rollout 
maneuver  and  assumed  that  the  pilot  could  not  get  any  of  the  visual  cues  neces¬ 
sary  for  a  manual  takeover  of  the  aircraft.  Alternatively,  the  second  attenuation 
function  (Figure  24)  was  developed  for  an  automatic  rollout  with  manual  assist 
capability.  This  function  assumed  that  the  pilot  could  indeed  see  the  runway 
lighting  patterns  and  provide  a  satisfactory  back-up  manual  control  capability. 

This  second  function  was  felt  to  be  the  more  realistic  because  of  the  following 
statement  by  test  pilot  Major  M.  Lipscey.  "The  runway  centerline  lights 
complimented  the  touchdown  zone  lights  and  provided  satisfactory  rollout 
guidance  for  even  the  lowest  RVR  encountered -during  the  tests.  The  overall 
ground  lighting  system  was  considered  satisfactory  for  both  a  visual  takeoff 
and  landing  rollout.  .  ."  (Ref.  1) 

The  utility  of  these  attenuation  functions  was  achieved  by  combining  them 
with  a  typical  runway  speed  profile  for  the  test  aircraft.  Recorded  light  data 
from  mission  175  provided  the  runway  speed  profile  information  shown  in  Figure 
25.  Thus,  by  combining  the  runway  speed  profile  with  the  respective  attenuation 
functions,  a  time  base  weighting  factor  was  defined  and  subsequently  included  in 
the  decision  tree  analysis.  These  results  are  described  in  Table  8.  It  is  relevant 
to  again  point  out  that  only  the  hazards  to  safety  for  the  rollout  maneuver  were 
attenuated.  The  other  hazards  to  safety  were  unchanged. 

From  Table  8,  it  is  evident  that  the  safety  of  the  STACC  system  configura¬ 
tion  is  again  superior  to  the  Category  III  adapter  system  configuration  by  approx¬ 
imately  six  orders  of  magnitude.  The  important  thing  to  observe  from  this  data 
is  how  attenuation  functions  affected  the  results.  In  all  cases  the  hazards  to 
safety  are  significantly  reduced  from  their  original  calculations.  For  the 
second  attenuation  function  (assumed  to  be  the  more  realistic),  the  analysis 
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RUNWAY  SPEED  (KNOTS) 

Attenuation  Function  -  No  Pilot 


RUNWAY  SPEED  (KNOTS) 

Attenuation  Function  Limited  Visibility 


predicts  approximately  1  hazardous  landing  per  10  landings  for  the  Category- 
Ill  adapter  configuration  and  1  hazardous  landing  per  10  landings  for  the 
STACC  configuration.  The  predicted  standard  deviations  for  these  hazards 
are  also  relatively  small.  Thus,  the  variant  effects  of  landing  segment  time 
and  equipment  MTBF  appear  to  be  of  minor  significance. 

COMPARISON  OF  RESULTS 

The  results  of  this  safety  analysis  were  compared  to  accepted  industry 

standards  and  experience.  The  Air  Force  specification  MIL-F-9490D 

requires  that  a  flight  control  system  on  a  C-141-type  aircraft  be  extremely 

_  7 

reliable  and  provide  a  probability  of  aircraft  loss  of  less  than  5  x  10  per 
flight  (or  mission).  However,  when  the  aircraft  is  flown  under  an  "environ¬ 
mental  limit  or  opreational  restriction"  the  probability  of  aircraft  loss  can  be 
increased  by  a  factor  of  not  more  than  30  times.  This  was  interpreted  to  mean 

that  during  a  Category  HI  weather  landing  the  probability  of  aircraft  loss  due  to 

5 

the  flight  control  system  should  not  be  greater  than  1.  5  x  10  .  From  Table  8, 

the  hazards  to  safety,  obtained  by  employing  the  second  attenuation  function 
assuming  limited  pilot  visibility,  meet  the  requirements  outlined  by  MIL-F-9490D 
for  flight  control  systems  for  both  system  configurations. 
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TIME  (SECONDS) 
Runway  Speed  Profile 
FIGURE  25 
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PITCH  RATE  GYRO 


RADAR  INDICATOR 


ROLL  RATE  GYRO 


AD-A067  524  DAYTON  UNIV  OHIO 

LANDING  SYSTEM  RELIABILITY  AND  SAFETY  MODEL* (U) 


AFFDL-TR-79-3107 


F33615-74-C-3075 


SIMPLIFI 


VERTICAL  GYRO 
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APPENDIX  B 


COMPUTER  PROGRAM  INFORMATION 


APPENDIX  B 


The  computer  programs  for  this  reliability/ safety  analysis  were 
designed  to  provide  the  respective  calculations  for  both  system  config¬ 
urations  (Category  III  Adapter  and  STACC).  Each  Bystem  configuration 
had  a  separate  computer  program  which  provided  the  analysis  via  a  Monte 
Carlo  simulation.  This  simulation  technique  allowed  the  respective  cal¬ 
culations  to  reflect  the  influence  of  MTBF  and  operational  time  variability 
on  the  reliability/ safety  values.  Thus,  the  programs  determined  not  only 
the  nominal  probability  values  but  also  determined  the  variability  associated 
with  each  calculation.  A  simplified  flow  chart  for  the  basic  computer  pro¬ 
grams  is  illustrated  in  Figures  B1  and  B2.  Descriptions  of  the  basic  process 
generators  for  the  Monte  Carlo  simulations  and  computer  printouts  for  both 
system  configurations  are  included  in  this  appendix. 
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COMPUTER  ANALYSIS  FLOW  CHART 
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COMPUTER  ANALYSIS  FLOW  CHART  (Cont.) 


Uniform  Process  Generator 


For  a  uniformly  distributed  random  variable  X 


fx(X) 


r 


- - ,  a<X<b 

b  -  a 


r 


X-a 

b-a 


X  =  a  +  r(b-a) 


where  r  is  a  random  number  between  0  and  1. 

Th  individual  process  generators  for  equipment  MTBF  were  based 
on  this  uniform  distribution  with  a  variability  of  +  10  percent  from  the 
nominal  MTBF  values.  This  is  illustrated  as  follows: 


t 

i 

i 

i 

I 

- _ _ I  _ J _ 

90  1  l.  10 

MTBF  X  MTBF 

where  the  sampled  values  from  the  distributions  can  be  represented  by 
X  =  .90MTBF  +  (r)  (.20  MTBF). 


Normal  Process  Generator 


For  a  normally  distributed  random  variable  X 


r  - . 

loo  <T  \/Zl F 


where  =  mean 
,  2 

and  cr  =  variance 


e-  (t-A)2/  (2 <r2i  dt 

e-(t-x)2/(20-2)  dt 


where  r  is  a  random  number  between  0  and  1.  However,  this  integral 
cannot  be  evaluated  analytically  but  can  be  evaluated  with  the  use  of  an 
approximation  for  the  cumulative  standard  normal  distribution  (mean 
0  and  variance  1),  The  standard  normal  distribution  employs  the  follow¬ 
ing  transformations: 

z  _  .  *  Vfr  . 

*  <7- 

dt  =  cr  dz 


therefore  r  =  f  ~~ ~r~  e  ^  dZ 

—  oo  2  7r 

Because  of  the  symmetry  of  the  normal  distribution  about  the  mean  ( r=0. 5) 

and  the  computational  approximation,  the  variable  X  can  be  represented  as 

r  -  0.  5  _  /  2,  515517  +  0.  802853V  +  0.010328V2 

X  =x£<  +  |r  -  0.  5|  ^  V  “  1  +  1.  432788V  +  0.  189269V*  +  0.  00  J  308V3 

where  V  =  J 2  In  0.  5  (1  -  |l  -  2r|  ) 

The  normal  distribution  process  generators  were  used  to  determine  the 
sampled  values  for  the  modeled  time  segments  of  the  landing  profile.  Values 
for  the  Mean  £/*.)  and  standard  deviation  (<7“)  for  each  time  segment  served  as 
inputs  to  the  respective  process  generators. 
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Reliability/Safety  Analysis  Results 
(STACC  System  Configuration) 
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SAFETY  ANALYSIS  RESULTS 


Per  Landing 


Did  Not  Vary  Either  Equipment  MTBF 
or  Segment  Time  Intervals 
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RELIABILITY  ANALYSIS 


LOC  CAPTURE  TO  ARM  G /S 


MEAN  TIME  * 

STD.  E'EV.  OF  TIME  •=• 

MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 


210. 

0. 
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0. 
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ARM  0/S  TO  G/S  CAPTURE 


MEAN  TIME  = 
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G/S  CAPTURE  TO  APPROACH  ARM 
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LAND  ARM  (100  FT)  TO  FLARE  ENGAGE  (45  FT) 
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TOTAL  RELIABILITY  FOR  COMPLETE  MODEL 
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SAFETY  ANALYSIS 
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•:o  (o  co 


">0— 

WHEEL 

1  0= 

PROS  A 

WHEEL  SPIN— UP  NOT  DETECTED  ANEi  SUCCESSFUL  R/GA 


PROBABILITY  =  5.  024 173331 4393267553290* 95 iE- 7 
STD.  DEV.  =  0. 

MAX  VALUE  —  5.  0241 7S33  i  4393237533290395 i  E— 7 
MIN  VALUE  =  5.  024i733c-143:9323-73332903?5i£— 7 


NON— CRITICAL  FAILURE  DURING  ROLLOUT 

•PROBABILITY  =  .  000401 73S23S2430S5 1 12317239977 
STD.  DEV.  =  0. 

MAX  VALUE  —  .  00040 1 7 3S23S243033 1 1 2S i 7239977 
MIN  VALUE  =  .  00040 1 73S23S24 3035 1 12S1 7239977 


BACK-UP  ROLLOUT  MODE 


PROBABILITY  —  .  00000440905279 1 22:" 

STD.  DEV.  -  0. 

MAX  VALUE  =  .  00000440905279 1 22? 

MIN  VALUE  —  .  00000440905275'  122? 


13392353097 

>3392353097 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  DURING  ROLLOUT 

PROBABILITY  =  .  0000 133 IS 10751 2330 1343313572358 
STD.  DEV.  =  0. 

MAX  VALUE  =  .  0000 1 33 1 S 1 075 1 2330 1 3433 1 3372333 
MIN  VALUE  =  .  0000 1 33 1 3 1 073 1 2530 1 3433 1 5372333 


LOCALIZER  FAILURE  AND  SUCCESSFUL  R/6A 

PROBABILITY  =  3.  5731 472*4 161 7560791 55433S3E-3 
STD.  DEV.  =  0. 

MAX  VALUE  =  3.  573 147294 131 733074'  1 5543637E-8 

MIN  VALUE  =  3.  5731 47294 1 31 753-0791 55433-S7E—S 


SAFETY  HAZARD 

PROBABILITY  =  4.  935339300 130059141 44274766E— 1 1 
STD.  DEV.  =  0. 

MAX  VALUE  =  4.  9353393001 3-0039 1 4 144274733E— 1 1 

MIN  VALUE  =  4.  333339300i3-0G59i414427473-c-E—  1 1 


ATTENUATED  SAFETY  HAZARD  (NO  PILOT  VISIBILITY) 

PROBAE I L I TY  =  2.  233977 411 5S34S9S323S402339E- 1 1 
STD.  DEV.  *  0. 

MAX  VALUE  =  2.  283-977 411 3SS43P3323S4G2339  E- 1 1 

MIN  VALUE  =  2.  23397741 15*'c-*?*VS3Vi*-::40i33'rE.— 1 1 


*_n  01  01  01  01  01  'Jl  01  01  Ol  01  Ol  Ol  4*  t>  .*»  ilO 

4.,  4*  4»  4»  4_»  4.1  4*  4*  -t'  t--*  4*  (•>  <_• >  •-*  »-*  m  »-»•-»  rn 


ATTENUATED  SAFETY  HAZARD  (NO  PILOT  VISIBILITY) 
PROBABILITY  =  2.  2S697741 1 53S4S9S326S402639E-1  i 


’0= 


STD.  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  = 


0. 

2.  23697741 153S4898326S4G2639E— i i 
2.  2 So'? 7 7 4  i  i  5  S  S 4 3 9 S 32 6 S 4 0 2 6 S 9 E - 1 1 


.  i.i= 
>0= 
•■0= 

'•0= 
:0= 
■  6= 


ATTTENUATED  SAFETY  HAZARD  {LIMITED'  F'lLOT  VISIBILITY) 

PROBABILITY  -  3.  69943 11 2223602469043029332E- 12 

STD.  DEV.  »  o. 

MAX  VALUE  =  S.  6994SI  122236-02469043029332E— 12 

MIN  VALUE  •=  3.  699431 12223602469043029332E-12 


NOS/BE  L414H  ECS  CYBR  CMR3  05/30/77 
43.  PAT I AE I  FROM  /IA 

43.  IP  00000 1 2S  WORDS  -  FILE  INPUT  ,  DC  00 
43.  PAT  <  T25, 1050,  CM1 00000,  STCSB)  D760276.  BUS 
43.  SINGER,  UD,  229-4233 
50.  ATTACH <LGO, AWL33BIN, CY* i ) 

34.  MAP'  <  PART  5 
37.  LGO, 

39.  STOP 

39.  2.  451  CP  SECOND'S  EXECUTION  TIME 

39.  OP  00001600  WORDS  —  FILE  OUTPUT  DC  40 
39.  MS  3534  WORDS  (  3534  MAX  USED) 

39.  SCM  100000  WORDS  MAXIMUM 
3.  525  SEC. 


39.  CPA 
39.  10 
39.  CM 
39.  CRUS 
39.  COST 
39.  PP 


1 .  256  SEC. 
123.  164  KWS. 


DAT 


1.  530  ADU. 

.  623  ADU. 

.  935  ADU. 
3.  144 
IS 

E  07/20/77 


EU  END*  OF  UOB,  I A  D760276. 


Only  Varied  Equipment  MTBF 


1)1  !.•> 


30=0NL 


R 


=05 eng 


=  100, 

=  .  1  E-rOOl 


A  LUK&2, 
tPe*.--  tO'U 

<,ro  te  v.  ~-0  ■ 


RELIABILITY  analysis 


LOG  CAPTURE  TO  ARM  G/S 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  “ 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 


210. 

0. 

1 5.  5627623406- 1 7 8475965 1 7 6369 
.  1 

.  99647342 1 452 1 949269704905 1 9 
.  0000c.  1 07734 1 69650 1 64364645923 1 3 
.  9966743272605533 1 6 2924 9 3 876 
.  996255 1 4336048 1 563230251245 


ARM  G/S  TO  G/S  CAPTURE 


MEAN  TIME  * 

30. 

(_• — 

STD.  DEV.  OF  TIME  » 

0. 

-  S.yy^v. 

MTB'F  * 

15.  11 2229656576969559891 86 

uC::.v' 

VARIATION  = 

.  1 

•  « 

MEAN  OF  RELIABILITY  = 

.  9994794989209577? 1 55227 1811 

STD.  DEV.  OF  RELIABILITY 

=  .  00000884243447765012650059173113 

:'C- 

MAX  VALUE  = 

.  99950396882347207308557752 

:•  i.) a: 

MIN  VALUE  = 

.  99944820508356875 1 60 1 537483 

1 


G/S  CAPTURE 


TO  APPROACH  ARM 


MEAN  TIM£  = 

STD.  DEV.  OF  TIME  = 

MTBF  =  * 

VARIATION  — 

MEAN  OF  F;ELIAE;ILITY  ■ 

STD.  DEV.  OF  RELIABILITY  = 
MAX  VALUE  = 

MIN  VALUE  - 


30. 

0. 

1 4.  344054 9608996800678 1 5 1 4S 1 
.  1 

99944  743890 1 8334 1 093S287291 
.  00000S75223069S7 1 34339446668367 1 
.99947742 147492077 1691 780689 
.  9994 18690806811 322048072891 


APPROACH  ARM  TO  LAND  ARM 


(100  FEET) 


MEAN  TIME  — 

STD.  DEV.  OF  TIME  * 

MTEF  = 

VAR I AT I ON  » 

MEAN  OF  REL I AE I L I T Y  * 
r-TD.  DEV.  OF  RELIABILITY 


81.  54 

0. 

1 1 .  2838:9 1 3689005 1 1 6325204 1  £3 
.  1 

.  998079400291 759936896328902 
.  0000262004675455933736972541534 
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LAND  ARM  (iOO  FT)  TO  FLARE  ENGAGE  (45  FT) 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  ■ 

MTBF  = 

VAR I AT I ON  = 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  * 

MIN  VALUE  = 


5.  35 

0. 

1 1 .  2333? 1 3689005 1 1 6325204 1 S3 

.  1 

.  999S73S72423334S94250693S6S 
.  00000172213711121400232970343099 
.  99937390 1 60693350032273 1 622 
.  9993632035700077 15160449239 


FLARE  ENGAGE  (45  FT)  TO  DECRAB  (20. FT) 


MEAN  TIME  =  3.  07 

STD,  DEV.  Or  TIME  =  0. 

MTBF  =  11.5326673325532027532611149 

VARIATION  =  .  1 

MEAN  OF  RELIABILITY  “  .  99992932 7373 73637 4 52903 7369 

STD.  DEV.  OF  RELIABILITY  =  9.  31291744992160219657726629E-7 
MAX  VALUE  =  .999932161730095615714954393 

MIN  VALUE  =  .  999926005248291995633657617 


DECRAB  (20  FT)  TO  TOUCHDOWN 


MEAN  TIME  * 

STD.  DEV.  OF  TIME  * 

MTBF  * 

VARIATION  = 

MEAN  OF  RELIABILITY  - 
STD.  DEV.  OF  RELIABILITY  = 
MAX  VALUE  = 

MIN  VALUE  = 


4.  02 

0. 

11.  532667332553202  758*  611149 
.  1 

.  999907459006596490279906595 
.  00000 1 23492036 1 63637035352749733 
.  9999 1 1 1 70363903 1 950 1 54724 1 4 
.  999903 1 0395379920647 1 650732 


TOUCHDOWN  TO  STOP 


MEAN  TIME  — 

-STD.  DEV.  OF  TIME  - 
MTBF  = 

VARIATION 

MEAN  OF  RELIABILITY  * 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 


22.  73 

0. 

13.  65137131 6945904 1 35460 1 865 
.  1 

.  9995592149754354 1 6463673336 
.  00000703 1 6352 1341 927  9420 1 723965 1 
.  999573627073324 i 555 1 4074532 
.  99953720553006 1 432342527536 


TOTAL  RELIABILITY  FROM  AF'F'ROACH  ARM  TO  S;TOF' 


MEAN  OF  RELIABILITY  =  ,  997350331 34723-3001 7216-0595 

STD.  DEV.  OF  RELIABILITY  =  .  0000529797275S2034216259357314S 
MAX  VALUE  =  .  997-457995736044521 44S3621  S3 

MIN  VALUE  =  .  99722946-347 A i  1  A. i  oj-? 


TOTAL  RELIABILITY  FOR  COMPLETE  MODEL 

MEAN  Or  RELIABILITY  =  .  9927724251 893713387793983 IS 

STD.  DEV.  OF  RELIABILITY  =  .  000162315544103776118325823798 
MAX  VALUE  =  .  993 1 3336 1 2335405 i 5222272374 

MIN  VALUE  =  .  992369572493 1 9356323 1 349944 


SAFETY  ANALYSIS 


SYSTEM  OPERATIONAL 

PROBABILITY  =  .  99939626327305432517445132 
STD  DEV.  »  .00000925290109949713077533080114 

MAX  VALUE  »  .  99942201303936275656514166 

MIN  VALUE  =  .  9993665320922909 1 572577 0575 


NON— CRITICAL  FAILURE  AND  SUCCESSFUL  R/OA 
PROBABILITY  =  .000177753112001031511176353692 


STD.  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  * 


00000264800917791326723 11401 9434 
000 1 365 1 3530757953605394095254 
000170137211 564534333634553234 


CRITICAL  FAILURE  TO  3IN0LE  CHANNEL  'ANEi  SUCCESSFUL  R/OA 

PRGBAB I L I T Y  =  .  000004 1 99392339690406246 1 1 323 1 34 
STD.  DEV.  =  1.  3090514301 133346300244431  IE-7 

MAX  VALUE  =  .00000464496239594223114812916913 

MIN  VALUE  =  .  00000380943563436721987902515053 


WHEEL  SPIN— UP  NOT  DETECTED  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  5.  039618002010921 104323634 13E-7 
STD.  DEV.  =  2.  05756935 1329941 039 142970S6E-S 
MAX  VALUE  =  5.  57244253576658497525202552E-7 
MIN  VALUE  =  4.  576380543990550938867 14S53E-7 


NON— CRITICAL  FAILURE  DURING  ROLLOUT 

r  r.OBAB  I L I  TV  *  .  00040354622 152691 1008641642224 
*  ~Z<  DEV.  =  .  000007 1 690329255232200  i  34  5 1 1 072 1 

MAX  VALUE  =  .  000426435549 10554400 1375563022 

m::j  VALUE  =  .  000334473920933437523533362294 


BACK-UP  ROLLOUT  MODE 


BACK-UP  ROLLOUT  MODE 


PROBABILITY 
STB.  DEV.  = 
MAX  VALUE  — 
M I  VALUE  = 


.  0000044053 1 5S4  7 07?  SO i 66974649SS4 
1 .  6552532 1 056632360267S76537E-7 
.  00000436019271  i  04 523537 652450 1 42 
.  0 0 0 0 0 4 05 5 7 2 0 S 1  i  32539560937 225632 


_ 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  DURING  ROLLOUT 


r ROBABIL I TY 
STD.  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  = 


.  0000 1 54 1 43 1 2 1 3 1 5500 1 2226 976564 1 
5.  390583696349779 1 59526 1 040 IE— 7 
.  0000 1 47697701 66SS 1 25532465030 1 9 
.  0000 12141 7360333 1 45327362753323 


;  ;.;5 

50= 


L.OCALIZER  FAILURE  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  3.  5732562692097230049577031 7E-S 
1.11 5752721 2544  ill 2512461466 E— 9 
S;.  90034 1 4 5 3 4 4 5 23 9 3 7-3 2 7? 02 7 2 6 E -  S 
3.  324300756569 141 390 1 7 65S046E— 3 


1 0= 

S7 D.  DEV.  = 

MAX  Vh!_UE  = 

l-'O— 

Mum  = 

10= 

SAFE" 

3*j= 

.  A  - 

-  v— 

P ROBAB I L I TY 

70-L 

STD.  DEV.  « 

MAX  VALUE  = 

rO“*“ 

MIN  VALUE  = 

00- 

10= 

ATTENUATED  SA 

tO= 

"30= 

PROBABILITY 

:-v— 

ST D.  DEV.  = 

70= 

MAX  VALUE  = 

50= 

M I N  VALUE  = 

5.  02061 43023539997705401 339SE-1 1 

3.  5921 121 127353400 145257544 IE- 12 
5.  95653946326502 1 035 1 327 4 53 1 E- 1 1 

4.  1 3673757536 127020042749952E-1 1 


ATTENUATED  SAFETY  HAZARD  (NO  PILOT  VISIBILITY) 


2.  32339394  965236 1 36 1 3967324 5E- 1 1 

1 .  4 23790330336323 1 9 1 49729 1 29E- 1 2 

2.  737 1 74300963929322 10334 799E—1 1 
1.  9177161 9263726457 003 131 095E- 1 1 


00= 
:  0= 

10= 
s  0s 

3  Of 

60= 

70= 


ATTTENUATED  SAFETY  HAZARD  (LIMITED  PILOT  VISIBILITY) 


PROBABILITY  =  3.  309S9710529525442744050109E— 12 
STD.  DEV.  =  4.  645792041 15542367 16S5546S6E- 13 

1.  0510397753397313917297741  IE- 1 1 
7.  26560 1 72200367 659029503739E— 1 2 


MAX  VALUE  = 
MIN  VALUE  =■ 


SO-^EOR 


•  p 

II 

i-> 

c 

SB 

■*;  r 

= 

10. 

'r  / 

= 

10. 

tr;*r 

= 

1 0. 

1  .* 

= 

10. 

57. 

-t 

10. 

57. 

10. 

ar  T 

.  .* 

= 

1 0. 

57. 

= 

1 0. 

57. 

s: 

s 

1 0. 

— 

10. 

57. 

= 

1  0. 

37. 

N03/BE  L414H  ECS:  CYBR  CMR3  05/30/77 

>5.  PAT  I  Ac- Y-  FROM  /IA 

55.  IP  00000256  WORDS  -  FILE  INPUT  ■  DC  00 
•5.  FAT (T25<  1 050/  CM! 00000/  STC3B)  0 7 602 76 «  E:US 
>5.  SINGER/  UD»  229—4235 
>7.  ATTACH  (LOG/  AWLS3:BIN/  CY=1  ) 

•7 .  MAF  i  FART  ) 


V/.  U'-'’1-'. 


.3.  MS 


ST  OP 

2.  422  CP  SECONDS:  EXECUTION  TIME 
00001664  WORDS  —  FILc.  OUTr'UT  /  DC.  40 
3534  WORDS  (  3534  MAX  USED) 


Run  #  3 


Only  Varied  Segment  Time  Intervals 
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P-  . 


1  0s 


•i 

.I*'*;; 


RELIABILITY  ANALYSIS 


X A’e'ii?  :CV» 
StcdeV.  i  -Ltuvy 


LOC  CAR  TORE  TO  ARM  0/S 


50= 

MEAN  TIME 

90= 

STD.  DEV.  i 

r*0— 

•MTBF  = 

1  Vs 

VARIATION 

1*;  — 

MEAN  OF  R 

50= 

STD.  DEV.  i 

40= 

MAX  VALUE 

50= 

MIN  VALUE 

50= 

H 

>  O  •: 

.  if'  1 

00= 

ARM  i 

20 = 

MEAN  time 

JO— 

STD.  DEV.  * 

40= 

MTBF  = 

—  ;*•.  — 

VARIATION 

-0= 

MEAN  OF  R: 

70- 

STD.  DEV.  i 

<1 

o 

<0 

MAX  VALUE 

40— 

MIN  VALUE 

•*..  . 

20= 

JO— 

40- 

0/3  i 

30— 

*J0— 

MEAN  TIME 

70= 

STD.  DEV.  I 

30= 

MTBF  = 

90= 

VAR I ATI ON 

00= 

MEAN  OF  Ri 

10= 

STD.  DEV.  i 

-20= 

MAX  VALUE 

J0= 

MIN  VALUE 

•40— 

3*0= 

60= 

70= 

50= 

APPRf 

90= 

00= 

MEAN  TIME 

10= 

STD.  DEV.  ( 

2£>= 

MTBF  = 

;-:*;•= 

V  An.  I  AT  I  ON 

•/is 

MshiN  Or  PE 

59= 

STD.  DEV.  •: 

rtAX  vAljj£ 

<;  v 

min  value 

•*  — 

LAND  A.r.M 

21 0. 

0. 

1  6.  6 3 S 6  0 6 0 0 7 9 6 5 S 4 3 9 0 9 066423 & 
0. 

.  9964 965 147541 756S4456 1 6 1 065 
0. 

.  9964 965 1 4754 1 756S4456 16 1 066 
.  9964965 1 4754 1 75634456 161 066 


ARM  0/S  TO  0/S  CAR  TORE 


T I  ME  — 


SO. 

0. 

1 6.  1 0 1 97335 1 1 6433 1 1 954369903 
0. 

9994320659 1 400672640357 6944 

0. 

.  9994Si20659 1 400672640357 6945 
.  99943206591 4006726403576945 


0/3  CAR TORE  TO  APPROACH  ARM 

30. 

TIME  *  0. 


1 5.  1 624933074491 654623633497 

O. 

9994 500 1 6346329925745560099 

0. 

.  9994 500 1 6346329925745560 1 
.  9994500 1 63463299257455601 


APPROACH  ARM  TO  LAND  ARM  ( 1 00  PEE T ) 


31.  54 

I.  95 

I I.  3313104032751170011556572 

0. 

.  99303 1 335295249754394353433 
.  000027937 1249352933237 1 4126c 
.  993 1759451 92777 1 3624 1 34563 
.  99793 1 3235033 1 3227547760547 


LAND  A.PM  \  1 00  F  T )  70  FLARE  ENOAOE  (45  r  T ) 
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LhND  AF:M  <  100  FT)  TO  FLARE  ENOAG'E  (45  FT) 

MEAN  TIME  =  5.  35 

:7D.  DEV.  OF  TIME  =  42 

MT BF  =  11.  S3 1 S 10403275 1 1 700 1 1 333572 

V ARIA  i  ION  =  0. 

MEAN  OF  RELI AE I L I  TV  =  .  y 9 9 S' 7 3 75027542 3 32100 3 9 3 1715 

STD.  DEV.  OF  RELIABILITY  =  .  00000657809497904322 1641 73335033 
MAX  VALUE  =  .  9 ? 9 S ? 5 3 S 13400 S 9 4 4 9 9 1 7 7 4 2 S 3 6 

MIN  VALUE  =  .  999354 5 i 93043 1 3 1 0035377 1 324 


FLARE  ENGAGE  (45  FT)  TO  DECRAE  (20  FT) 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTEF  = 

VARIATION  = 

MEAN  OF  EEL I AE I L I TV  * 
STD.  DEV.  OF  RELIAEILITV 
MAX  VALUE  a 
MIN  VALUE  = 


12.  1 1 90205509405003040250433 

0. 

.  9999295339032 1 40344330700 1 1 
.  000004505007951 0034907 1 00244435 
.  999945733493 1 900032797 1 493 1 
.  9999 1 2930023 1 77 4741 3205:0579 


DECRAE:  (20  FT)  TO  TOUCHDOWN 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTEF  = 

VARIATION  * 

MEAN  GF  RELIABILITY  = 
STD.  DEV.  GF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  — 


12.  1190205509405003040250435 

0. 

9  9 9073367 1 2340720453334921 
.  000004 1 03 1 902 1 5342050239 1 3395326 
.  999919325979020015070309034 
.  9993922454 1 3700 1 240096243 1 7 


TOUCHDOWN  TO  STOP’ 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  - 
MTBF  = 

VARIATION  = 

MEAN  Or  RELIABILITY  * 
STD  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE 


1 4.  395540579471 0S9S297S0S 1 09 

0. 

.  999502237751 229033549530947 
.  0000053 1 500 1 300 1 S36S307S3805330S 
.  9993793 1 390 121 5075394090033 
.  9995373724 1311 3435 1 00007504 


TOTAL  REL I AE-IL I  TV  FROM  APPROACH  ARM  TO  S:TGF’ 


MEAN  Or  RELIABILITY  —  .  997330493074129537904544370 

STD  DEV  Or  RELIABILITY  *  .  00004 S3 1 1231 1  i  139230-3 15:53 1770-3S: 
MAX  VALUE  —  .  9974595552973007730.57303825 

MIN  VALUE  =  .  99724  9009123414131751532494 
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TOTAL  RELIAE*ILITY  FOR  COMPLETE  MOEiEL 

MEAN'  Or  RELIABILITY  =  .  99230 1 1 3937 1 3033*059722401 

c-TD.  DEV.  OF  RELIABILITY  =  .  0000431 1341236050*5355957774751 
MAX  VALUE  =  .  992903730774 11351753235709 

MIN  VALUE  —  .  992*94 1 96243*09570365249672 


SAFETY  ANALYSIS- 


SYSTEM  OPERATIONAL 


40= 

PROBABILITY  =  . 

9 9 9 3 9 9 5 9 0357943 *3 ! 

50= 

S*TD'.  DEV.  = 

000003 1 926726994- 

c-0= 

MAX  VALUE  = 

999 4246232;  1 10977? 

'3*0= 

MIN  VALUE  = 

9993647393624429: 

i  0= 

NGN— OR I T I CAL 

PA I LURE  AND  SUCCi 

10= 

PROBABILITY  =  . 

0001 7737 03959223- 

40= 

STD.  DEV.  = 

0000060503*6960 1  O' 

50= 

MAX  VALUE  = 

00020S 1 557370 1 62 

11  11 

0  0 
•*?*! 

MIN  VALUE  = 

000 161 07902994**0: 

CRITICAL  FAILURE  TO  SINGLE  CHANNEL  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  .  000004 1 9439430*7539067 1 632375476 
STD.  DEV.  =  1.  39*3462259700 1363503S940959E-7 

MAX  VALUE  =  .  00000490645960255154527269644996 

MIN  VALUE  =  .  0000033 1 S34 1 93367 1 62929534332906 


WHEEL  SP  IN- UP  NOT  DETECTED*  AND*  3  U  CUE  *  3  F  U  L  R/GA 

PROBABILITY  =  5.  024 i 7 695793324334777 606434E-7 
STD.  DEV.  =  2.  75573 1 033 U034S073 1925333 IE- 12 

MAX  VALUE  =  5.  0242607300694 1442500794247E- 7 

MIN  VALUE  —  5.  02401  S*6422*742*36-7c*Sl 0229 1 76E— 7 


NON— CRITICAL  FAILURE  DURING  ROLLOUT 

rROEAB I L I TY  ■  =  .  00040064 12293 1*9  i7L957L2i06>7 IS 
STD.  DEV.  =  .-00000583313254764195533901303631 

MAX  VALUE  ~  .  00042397 1 5*77*563 / 45906403967 1 

MIN  VAi_0£  =  .  0 0 0 3 3 4 2 3 7 7 5 7 4  i  4  2 3 S 3 269 * 29 5 2 2 5 2: 


BACK— UP  ROLLOUT  MODE 

r  r.OBAB  I L I  TY  =  0000042*9729953 1 62000474237339579 

STD  DEV.  =  6.  3153331305521027940151 9S03E-8 


F  ROE-AE'.I  L I  TV 
STD.  DEV.  = 
i'irlX  VALUE  — 
MIN  VALUE  = 


.  00G00439729958 1  620004742372.39579 
6.  v  i  5  -•  I 3  i  '■'■0352 1 027940  i  51  9SG3E— S 
■  O  O 0 0 0 4 6 4 5 7 5 5 6471 1  77673S4£33?7374 
.  000C042 1  844S6S72677GSS9S.22329 1 12 


Ur. I  i  I UhL  .FAILURE  Tu  S INGLE  CHANNEL  DURING  ROLLOUT 

FRuE-AEILITY  =  .  0000  i  327674 762059286505 1 1 442638 
:■  i  D  DEV.  =  1.  9332"?  1 05 1 6942767 2657 1 02022E— 7 

MAX  'VALUE  —  .  0000 1 4050036487464 50446392589 4 

MIN  VALUE  —  .  0000 1 27347 171 20959 1 69882:6062473 


LOCALIZER  FAILURE  AND  SUCCESSFUL  R/GA 


PROBABILITY 
STD.  DEV.  ■= 
MAX  VALUE  — 
MIN  VALUE  = 


3.  57 4422639 181454 1 7953250397E-S 
2.  5728:83734 224 365 9  1  063'3S0:395E—9 

4.  4 1 774333000440023092 1 35 1 44E-8 
2.  750SS7 6:32:49 72339'342Sc'0304S£— S 


SAFETY  HAZARD 


PRGBABILI  i  Y 

—  4.  91 5 1 21 2660266-' 

STD.  DEV.  = 

1.  3415694351683: 

MAX  VALUE  = 

5.  4241 862 1 26635* 

MIN  VALUE  = 

4.  5391312069717 

TTENUATED  SAFETY  HAZARD  (NO  PILOT  VISIBILITY) 


PROBABILITY 
STD  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  = 


2.  27621 1 7233721 37 1 4S376S3456E- 1 1 
S.  5 1 322 1 SS733347504377530S92E- 1 3 
2.  58424576706730372241530572E—1 1 
2.  0367623746532777S644253642E-1 1 


TiTENUATED  SAFETY  HAZARD  (LIMITED  PILOT  VISIBILITY) 


F  R'CBAE  I L I TY 
STD.  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  = 


3.  671 1 9539094073542047424 1 97 E- 12 
4.611 28820 1 856386259073393S9E- 1 3 
1.  0276149'7722397776479637723E-1 1 
7.  4229 126601 4296861 480799325E— 12 


D  NOS/ BE  L414H  ECc;  OYER  CMR3  05/30/77 

3.  10.  FATIAGL  FROM  /I A 

3.  10.  IF'  00000256  WORDS.  -  FILE  INPUT  ,  DC  00 
S  10.  FAT (725/  1050.  CM  100000/  S  TO  SEN  D760276.  BUS 
I  1*./.  SINGER.  UD/  229—423© 

2.  14.  ATTACH (LGO/  AWLS-SBIN.  CY“1) 

.7  35.  MAP  (FART) 

T  35.  LGO. 

2.  IS.  STOP 

3  1  2  2.  4 Cl'  Cr  SECONDS  EXECUTION  TIME 

00001664  WORDS  -  PILE  OUTPUT  .  DC  40 
1534  WORDS  (  3534  MAX  USED) 


■jr 


•  */  C-r-M  1  '  .,-r/T-r  £ 
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Run  #  4 


Varied  Both  Equipment  MTBF 
and  Segment  Time  Intervals 


I 


: 0=05 END 


/?  ujls  3 

XPe«  -  /0J/c 

Std.DEV-  '  n'*A£j 


=  100, 

=  . 1E+00, 

=  1, 


RELIABILITY  ANALYSIS 


LOC  CAPTURE  TO  ARM  G/S 


MEAN  TIME  = 

STB.  DEV.  OF  TIME  = 

MTBF  = 

VARIATION  * 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  « 

MIN  VALUE  = 


210. 

0. 

1 5.  5627623406 1 78475965 176369 

.  9964784(21432 1 94926970490519 
=  .  0000610(778416965016436464592313 
.  996674327260553S 1 6292498876 
.  996255 1 4336048 1 56323025 1 245 


ARM  G/S  TO  G/S  CAPTURE 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  * 

STD.  DEV.  OF  RELIABILITY  = 
MAX  VALUE  = 

MIN  VALUE  = 


15.  11222965657696955989186 

!  9994794^892095779155227 131 1 
.  0000088(42434477650 12650059 1731 13 
.  99950896882347207308557752 
.  99944820508356875 1 60 1 537483 


G/S  CAPTURE  TO  APPROACH  ARM 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTBF  « 

VARIATION  = 

MEAN  OF  RELIABILITY  * 
STD.  DEV  OF  RELIABILITY 
MAX  VALUE  = 

M I N  VALUE  s 


14.  3440549603996800678151481 

.  9994474^:8901 8334 10938287291 
.  0  0  G  G  0  €:  7J5 2 2 3 0 6 9 S  7 1 34339446668367 1 
.  999477421 47492077169 1 780689 
.  9994 1 86908063 1 1 32204807289 1 


APPROACH  ARM  TO  LAND  ARM  (100  FEET) 


90= 

00= 

MEAN  TIME  = 

31.  54 

10= 

STD.  DEV.  OF  TIME  = 

1.  95 

20= 

MTBF  = 

11.  23339 

1 3639005 1 1 6325204 1 S3 

30= 

VAR  I  AT  I  C'N  = 

.  1 

ifi. 

MEAN  OF  RELIABILITY  = 

.  9930751 

3653 1 053433272643362 

STD.  DEV.  OF  RELIABILITY 

=  .  000041li612447796390451613976049 

60= 

MAX  VALUE  = 

.  993207026236445345332372233 

70= 

MIN  VALUE  = 

.  9979279 

567 1 732733 1 2 1 6963203 

90= 

00= 

10= 

20= 

LAND  ARM  <100  FT)  TO  FLARE  ENGAGE 

<45  FT) 

30= 

40= 

MEAN  TIME  = 

5. 

30= 

STD.  DEV.  OF  TIME  = 

42 

60= 

MTBF  = 

1 1 .  23339 1 3639005 1 1 6325204 1 S3 

70= 

VARIATION  = 

•  1 

50= 

90* 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 

.  9993733:] 
=  .  0000067] 

066307439292516071 13 

11 5235904 1 5 1 64435239393765 

00= 

MAX  VALUE  = 

.  9993966 

54 1 357 06093503334997 

1 0= 

MIN  VALUE  = 

.  999353337492953250 1 443255 1 7 

4  0  = 

50= 

60=  FLARE  ENGAGE  <45  FT)  TO  DECRAB  (20  FT) 

70= 


20* 

MEAN  TIME  = 

3.  07 

y  0  = 

STD.  DEV.  OF  TIME  = 

.  33: 

:>  wi: 

MTBF  = 

11.  532667382553202753261 1149 

:<W 

VARIATION  = 

.  1 

20= 

MEAN  OF  RELIABILITY  = 

9999292)57774526403663333665 

20= 

STD.  DEV.  OF  RELIABILITY 

=  .  00000480033337 1 27242395 1 9537 1 737 

40= 

MAX  VALUE  = 

.  9999443377495 1 9 1 6526762 1 064 

50= 

60= 

70= 

50= 

•'0= 

MIN  VALUE  = 

.99991 263 1 276 1 932956274236 1 5 

X>= 

DECRAB  <20  FT)  TO 

TOUCHDOWN 

!  0= 

20= 

MEAN  TIME  = 

4.  02 

50= 

STD.  DEV.  OF  TIME  = 

.  33 

10= 

MTBF  = 

1 1 .  532667332553202753261 1149 

50= 

VARIATION  = 

•  1  i 

50= 

MEAN  OF  RELIABILITY  = 

.  999907205563327231 4 1 7056703 

70= 

STD.  DEV.  OF  RELIABILITY 

=  .  000004  l]933S9022 1 030 1 60526256356 

50= 

MAX  VALUE  = 

.  999920435301657260664137117 

■iO= 

50= 

MIN  VALUE  = 

.  9993904 1 3904 9 1 33650604333 1 3 

TOUCHDOWN  TO  STOr' 

•:  MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

0-  MTBF  = 

0=  VARIATION  = 

■  0=  MEAN  Or  RELlAEiLIT  4  = 

STD.  DEV.  Or  REL I  AD  I L I  TV 


22.  72 
.  53 

1 3.  65 1 37 1 3 1 6945004 1 35460 1 365 

!  9995603^454 753254 1 025679534 
.  000003613 1 346392656000 1 5939 1 73534 

<-•«*.  .-iff  ."5  «  *  V*.  *  • 


TOTAL  RELIABILITY  FROM  APPROACH  ARM  TO  STOP 


MEAN  OF  RELIABILITY  = 


.  99734687 1 099774477593680443 


STD.  DEV.  OF  RELIABILITY  =  .  0000711*747131638135422785817012 


MAX  VALUE  = 
MIN  VALUE  = 


.  997505555616564602758040872 
.  997 1 7303990 1 273023236880494 


TOTAL  RELIABILITY  FOR  COMPLETE  MODEL 

MEAN  OF  RELIABILITY  =  .  9927684^3 1 96543 1 003 1 730 1448 

STD.  DEV.  OF  RELIABILITY  =  ,  000 1 699(920458 1 3652759638847632 
MAX  VALUE  =  .  993157174860233009007154266 

MIN  VALUE  =  .  992330762900879792423881654 


SAFETY  ANALYSIS 


SYSTEM  OPERATIONAL 

PROBABILITY  =  .  999397129483443644074419844 
STD.  DEV.  =  .  0000127^59097059438083033602574 

MAX  VALUE  =  .  999438307011958623061753246 

MIN  VALUE  =  .  99935487282917363355318202 


NON-CRITICAL  FAILURE  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  .  000 1780(395 1234220220 1833332396 
STD.  DEV.  =  .  0000066(1 38 1 389984751 877520580737 

MAX  VALUE  =  .  000210150279430771889580749722 

MIN  VALUE  =  .  000156755914099536107026967988 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  0000042J05801 71313983787369107381 

STD.  DEV.  =  2.  3072647040 179538604704O403E-7 

MAX  VALUE  =  .  000004885987696583109183026246 

MIN  VALUE  =  .  0000036270989653530061 05 170S2276 


WHEEL  SPIN-UP  NOT  DETECTED  AND  SUCCESSFUL  R/GA 
PROBABILITY  =  5.  0396162!3146150936903127949E— 7 


STD.  DEV.  = 
MAX  v A'_UE  — 
M I N  VALUE  = 


2.  05752 1 848458826 1 5053635557E-S 
5.  572509084940577094 1 73951 63E-7 
4.  5763642 1 843280959 1 0 1 563904E-7 


PRQEAE  I  LI  TV 
STD.  DEV.  = 
MAX  VALUE  = 
M I N  VALUE  = 


.  000402 4b 30206278 S 2 S' 9 9 5364.71 273 
.  000009 i(97 1501 40062383526927 1 3366 
.  00043603 1 240626623433003504305 
.  00037329263 106370457427006355 


BACK-UP  ROLLOUT  MODE 

PROBABILITY  =  .  0000043^34 1746497 146130365324996 
STD.  DEV.  =  1.  64624720361 17223303545321  IE-7 

MAX  VALUE  =  .  00000435517213210574653547033374 

MIN  VALUE  =  .0000039709512633571149647567303 9 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  DURING  ROLLOUT 


PROBAB I L I TY  =  .  0000 1 33^79 13011 2227665 1 366033933 
STD.  DEV.  =  5.  S105265675632S295260765894E-7 

MAX  VALUE  =  .0000149495329991964320177624132 

MIN  VALUE  =  .  0000119581376079350369757930332 


LOCALIZER  FAILURE  ANEi  SUCCESSFUL  R/GA 

PROBABILITY  =  3.  5732272 1 S77S0264 1 257 1 3259 1 E- 3 
STD.  DEV.  =  2.  6656212608541930727305779 5E-9 
MAX  VALUE  *  4.  6 6 8 7 0 7 1 5 2 0 6S 6 7 2 9 6 3 90 S 0 3 9 2 5 E — S 
MIN  VALUE  *  2.  67363S62607366090325299207E-S 


SAFETY  HAZARD 

PROBABILITY  =  5.  00194336140559399470724014E-1 1 
STD.  DEV.  *  3.  3536531 424736944 1 540430333E-12 
MAX  VALUE  =  6.  05363291251 7847S6362263266E— 1 1 
Ml N  VALUE  =  4.  0060236466161673347 1S13125E- 11 


ATTENUATED  SAFETY  HAZARD  (NO  PILOT  VISIBILITY) 

PROBABILITY  -  2.  31409224690063i0505306426*35E—  1 1 
STD.  DEV.  —  1.  6466074 65374 526-S936035699SE- 1 2 
MAX  VALUE  =  2.  3054249233 10326623029354 17E- 11 
MIN  VALUE  =  1.  S3SS8S582S05S14047S9470322E-11 


ATTTENUATED  SAFETY  HAZARD  (LIMITED  PILOT  VISIBILITY) 

PROBABILITY  =  3.  7863593539964701 191S071713E— 12 
STD.  DEV.  =  3.  3357361631421 1944S47734S6SE- 13 
MAX  VALUE  «  1.  0733633 16390732595 19243347E- 11 
MIN  VALUE  =  6.  83901 193206099379749643317E-12 


:SB  NOS/BE  L414H  EOS  CYB'R  CMR3  R.  D  14.  13 
02.  27  PAT I AUG  FROM  /IA 

02.  27  IF  00000256  WORDS*  —  FILE  INPUT  >  DC  00 

,•••*/  r  ■*  r  •*»  r  m  (  a  aaaci  *  r*i 


-41*. 


Program  Listing  for  Reliability/Safety  Analysis 
(Category  III  Adapter  System  Configuration) 
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Hu.’ks  a 


7-20-7  7 


rfUJt.S'2. 


Weil-  0% 


CYCLE  NO.  =  001 
DECK,  S 


00-PAT  <  725,  1050,  CM100000,  STCSS)  074-0276* 
1  C=A7TACri  •!  LOO,  AWL3DE  I N,  CY—  1 ) 

DO— MAP  \  PART ) 

:-o=loo. 

40**  EOF; 

30=  5 AWLS  NL= 100,  Xr'ER=0. .,  ANS—  1 5 
TC'H,  DECK,  INPUT,  HEr;E 


EUSSINOER, U0» 229—423S 


/ 


A.P£ 


CAC  PILES — 

_S2  CAROS 
AWLS3 

M OTE  INPUT  FILES- 

MOTE  OUTPUT  FILE; 
■  T I AEI 


*OECK 

*A3 


S INPUT  SOUTF'UT 

♦LOO  DUlil 


LiVt,k>g,  OF  AlOL$>-X- 


-0- 

o= 

i  0= 


i 


*Pet-'-oJL 

0~  -  Is+JU^. 


PROGRAM  AWLS2  ( INPUT) OUTPUT ) 

DOUBLE  PREC I S I ON  NUMAX i 3 > ,  NUM I N  ( 8 ) , MAXR7A,  MAXR77, M I NR7A,  MIN 

DOUBLE  PRECISION  D I r RIM (10 ) , DI F ( 8 ) . SUMD I F ( S ) -  RTAD I F,  RTTD IF, 

DOUBLE  PRECISION  RT7SD,  P£V(8), DEVRTA, DEVR77,  ELIA,  EL1B,  EG1, E 

DOUBLE  PRECISION  EXPLt,  EXPL2, ELI, EL2, ELS,  EL4,  ELS,  EL6,  EL7, M7 

DOUBLE  PREC I SI ON  7 1 ME  <  9 ) ,  R7 ( S,  1 00 ) , PMEAN (11) 

DOUBLE  PREC  I S I  ON  PDEV  (ID,  PMAX  ( 1 1 ) , PM I N  < 1 1 ) ,  SRT ( S ) ,  MEAN  ( 8 ) 
DOUBLE  PRECISION  R77( 100) ,  R7AA( 100) , XM7BF(8),  SR77,  SR7AA,  VIN 

DOUBLE  PRECISION  70P.  BOTTOM, VTERtt. ABSRN,  SUM20A,  SUM20B,  SUM20 

DOUBLE  PRECISION  SUM21.  SUM22, SUM23,  SUM24,  SUM25,  SUM26,  SUM27, 

DOUBLE  PREC I S I ON  SUM2S,  R7AAMN,  RTTMN, RLOC ( 3  > ,  ROS ( 3 ) ,  RGRND ( 3 ) 


DOUBLE  PRECISION  RT7N 

REAL  XMEAN ( 9 ) , STDDEV(9),  INS,  MCC, NAVREC.  NAVSEL,  EQUIP (55) 
INTEGER  ANS! 

COMMON  MTBF,  ELI,  EL2,  ELS,  EL4,  ELS, ELS,  EL7,  TIME,  SUM26.  SUM27,  SU 


COMMON  PMEAN,  PDEV,  PMAX,  F'MiN,  N,  NLOOP,  RT6N,  RT7N 
NAMEL I ST /AWLS/NL,  XPER,  ANS 
DATA  NL.  XPER,  ANS/ 100.  0.  1/ 

NLGOF-NL 
CALL  RANSET ( .  05 ) 

READ  AWLS 
PRINT  AWLS 
DO  60  1-1,8 
SRT  ( I )  =0. 

60  SUMDIF ( I ) =0, 

SR  7  AA=0. 

SR77=0. 

R7ASD=0. 

R77SD=0. 

AD  I  “1  OBJ.  77S 
EQUIP ( 1 )=ADI 
C0N7P— 631.  SOS 
EQU I P ( 2 ) — C0N7P 
COUP- 165.  ISO 
ECU IP(3) -COUP 
A I SERV-2732.  240 
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Mr* 


EOU  I P  ( 46 )  *  1 OOGOGGG. 

E  DU  I  r  <  47 5  —  i  000000. 

EOU I F  (  4  .? )  =  i  0000000. 

Ev!U  I  r  v  4  —  i  c.oc-c-c*.  c*c*7 

E>.!’J  I  r  30 ,j  —  1  1  c*7 1 .  3  -* 5 

EOU  I  r  ■’  0 0  ,*  =40cE5.  0 4  i 
EOU  1 F  i  30 ) =  1  237  s-.  2S-S 
EOU  I  r  •!  34  )  =  1  0000. 

EOU  IF  <  33 )  *  1 230000. 

XMEAN U  )=210. 

XMEAN  i  2  /  —  SO. 

X  MEAN  <  3 )  =2:0. 

XMEAN ( 4 ) *S 1 .  34 
XMEANU 3)  =3.  33 
XMEANU-) *3.  07 
XMEAN  ( 7 )  =4.  02 
XMEAN  (  S )  =22.  73 
XMEAN  <  9 )  =3. 

3  7  DDE  V  <  1 )  — 0. 

S7DDEV(2)«0. 

37DDEV  ( 3 )  =0. 

STDDEv  ( 4 )  *  1 .  33 
S7DDEVC3)*.  42 
STDDEV  < » )  *.  33 
3 TBDEv  v  7 )  *.  33 
STDBEV(S)  *.  33 
STDDEv  ( 9 )  *0. 

DO  40  N* 1 1  NLOOr 
DO  10  1*1,35 
RN=RANF  (  DUMMY ) 

MTBr  (  I )  =  i  <  1.  — Xr'ER )  ■*  <  EOU  IF  (!)))  +  <(  RN )  •»  (  2.  »Xr'ER)  •»  ( EQUIP  ( I )  )  ) 

1 0  C0N7 I NUE 
DO  30  M=i.  9 
RN*RANr  v  DUMMY  > 

v i ms i d=  •: -2.  > *Ai_oo ■: o.  5>*u.  -aes <  i  .  - < 2.  *rn > ) > 

Y=DSQR7 <  V INS ID) 

7 0"  =2.  5i331  7-r i 0.  S02S53'*V)  +  <0.  0 1 032S*'v'*V ) 

BOTTOM*  i.  +<1.  4327S-£*V)t(0.  1@92c-9*'v'*V)  +  (0.  00i30S*V*V*V) 
VTERM=V-  ( TOP/BOTTOM ) 

ABSRN*  <  RN-O.  5  >  /  < AES  ( RN-O.  3  >  > 

SO  7  I  ME  (  M )  -  (  XMEAN  i  M  >  /’3c-00.  )  +  <  ABSRN*  ( 37DDEV  ( M )  /3600.  )*VTERM) 
SUM20A*(1.  /M7EF  i  1  >  )  +  i  1 .  /M7BF  <2)  )->-<  1.  /M7BFC3)  )  +  ( 1.  /MTBF(4))-r 

1  r  ( 5 )>  +  <!.  /M7EF (6) ) 

SUM20E*  <  1 .  /M7EF  (7)  )  +  <l.  /M7EF  ( 9  ))■>■<  1.  /M7EF  <  10 ) )  +  <  I .  /MTBr  (11) 


'Mi 

-  0=  1 TEr (12))  +  <1.  /M7EF  < 1 5  j  ) 

00“  SUM20C* i  1.  /M7EF ( Is-) )  +  (  1.  /MTEF(IS)  >  +  <l.  /M7EF ( 19) )  +  ( 1.  /M7BFC2 

•  1 

i  0-  1 / M7EF (24) >  +  < 1.  /  MTBF ( 2? > ) 

2 O*  R7  i  1<  N)=DEXr  <  — i.  * <  SUM2CA+3UM2GB'',SUM20C )  *TIME<  1 )  ) 

‘ -  XM7EF  <  1 )  —  1 .  /  (  SUM20A-3UM20B+SUM20C ) 

.■  •=  SUM2 1  —  SUM20h-'3UM20E-^-SUM20C’- ( 1.  /?J7BF\14)  ) 

R7  '  2,  N>*DEXF  <-i.  *.SUh2i*TIME  ( 2  >  > 

.  ;•=  <M*E?  •;  2 )  =  1.  / SUM2 1 

=  SUM22-SUM2 1  1  /MTBr  \  S )  1.  /  M7E-F  (27)  ) 

-  -  P.7  Si  N  >  *DEXr  - 1.  *  SUM22-*”  I  ME  ( 3  >  ) 

VM7BF i 3  v « i .  ■ SUM22 

SUM 2  S  -  :  UM22+  ( 1 .  /  MTEF  ( 1  7 )  )  <  1 .  M7EF  <  20  )  •*  ( 1 .  /  M7BF  ( 22 1  i  *  <  1 .  /  M 


'W* 


As*: :  “  »» =  a .  / 

0= 

SvM23 = SOM 2  4 

0= 

S'OMEi  =  3LM23—  (  i.  /M 

0= 

RT  ■!  £■>  N )  =DEXP  C  —  i .  ♦ 

*0= 

X MTEF  <  3 )  =  i .  y  SL'M2c. 

0-. . 

r-'T  F  v  —  ft  T  \  o,  r: ) 

SGM2  7 = SUM2  c- 

RT <  7 . N)=DEXr(-i.  * 

:0* 

XMTEF ( 7 ) = 1 .  /SLM27 

■'0= 

RT7N=R7 (7/  N ) 

:*0  — 

S'.IM2SA=S:JM27-  (  i.  / 

:■)  ) 

?0= 

SUM2S=SUM2SA-< i.  / 

S) 

1 ) ~ ( i .  /MTEF (12)) 

•.’0= 

RT ( S< N ) =D£XF ( —  1 .  ♦ 

•  0= 

XMTEF  (  S )  =  i .  /SUM2-3 

.  0= 

EL 1 A= ( 4.  /MTEF (41) 

/M 

20= 

1TSF(  44  )  )-r(2.  /MTEF 

50= 

EL1E=<2.  /MTEF (4?  ) 

,/M 

•  0= 

1 TEF • 43 ) )  +  ( 4.  /MTEF 

?0= 

EL  1  =EL  1  A-^EL  1 E 

EL2=  (  1 .  /MTEF  \  43  /.>•*•  i  i.  /MTEF  ( 33 )  > 

EL3=  1 .  /MTEF (53) 

£L4=i.  /MTEF ( 32) 

EL5=<1.  /MTEF  \  31 )  ) ■*  (  1.  /MTEF < 4? } ) 

£Lo=  (  i.  /MTEF  (45)  )  +  (  i.  /MTEF  ( 33 )  ) 

EL7=i.  /MTEF (30) 

E  3 1  =  (  i.  /MTEF (53) )  —  < S.  /MTEF (45)  )  +  ( I.  /MTEF (4®)  )  +  ( 1.  /MTEF (39)7 

1 EF  •  54  )  )  +  ( 4.  /MTEF  ( 42 ) )  +  (  i .  /MTEF  <  47  ))■*■<  1 .  /MTEF  ( 43 )  ) 

£02=  <  1.  /MTEF  ( 45 )  )  +  ( 1.  /MTEF  ( 34 )  ) 

DO  32  »1,8 

£XF  Li  =  ( DEXF  ( -  i .  *TIME(K)*ELi ) )*( (3  -(2.  ♦  (DEXP  ( —  i.  #TIME(K)*EL 
12.  )  •»  ( 3.  ~  ( 2.  *(DEXF'(-1.  #TIME  (  K )  ♦ELS’  ))))♦(  3.  —  (2.  *(DEXF'<  —  i.  ♦TIM 
14)  ) ) ) 

EXPL2*(3.  - ( 2.  *(DEXr'(  — 1.  *TIME(K)*EL5) ) )  >*(2.  -DEXP(-1.  *TIME(K 


1*(3.  -  <2.  *(DEXP(-1.  *T  I  ME  ( K )  *EL7 )  )  )  ) 

RLOC ( K ) -EXPL 1 *EXPL2 

R03  (  K )  =E'£XF  <  - 1 .  *T  JME(K)  *EG>1  )♦(  (S;.  — <2.  *(DEXF’(  —  1.  *TIME(K)*EG2 


RGRND i K ) =RLGC ( K ) *RG3 ( K ) 

32  RT ( K<  N ) =RT ( K > N ) *RGRND (K) 

RTAA(N)=RT (4» N)*R7<5, N)*RT<6, N)*RT(7, N)*RT(8.  N) 
RTT ( N ) =RT (  1 .  N ) ♦RT (2 < N ) ♦RT ( 3<  N ) ♦RT AA ( N ) 

I F  <  AN 3.  EQ.  0 )  GOTO  210 
CALL  SAFETY 
1  i 0  DO  70  I  =  i . 3 
70  SR 7 i I ) =RT ( I j M ) —SET ( I ) 
r-r~.  <  ~r>=E7AA  \  N )  —SET  AA 
SETT  —  F TT  ( N !  *  SETT 
I F  (  N.  EO.  1  ;  COT  0  100 


.  ..  ....  .  ..  .  .  —  r. ’•* ,1,  ;  ~  A  <  i  > 

MA  '  “  T  A  =  l  MA  j  i  (  r.T AA  •  N  ;  <  MAX.R  >  A  i 
ML  »;R“7 =DMA/  i  •RTT1.  N )  .•  MA/.RT  i  ) 


i\r.A“  >  M*  I*,  i  MM  \  in  1 

MhXRTT=R77  (N) 

I F  ■'  N.  EQ.  1  GOT  0  i  10 
DO  1 10  1  =  1,  S 

HUM  I N  < I  )  =E>M  I  N  i  <  RT  (  I ,  N ) ,  NUis1 1 N  <  I  )  ) 

MI l<RTA=DMIm1  ( R7AA <! N ) ,  MINRTh ) 

MINRTT— DKINi ( RTT iNii  M I HR 7 7 ) 

GOTO  -50 
DO  140  I  — 1, 

NUM I N  \  I  /  — RT  ( I ,  iM  > 

M  I  NR7A— RT  mm  ( N ) 

M I  NRTT =R77  i  N ) 

CONTINUE 
DO  ISO  1  =  1-  8 

MEAN  < I )  =Sr.T  ( I ) /FLOAT  { NLOOF') 

RT AAMN=  SR 7 AA/FLOAT  <  NLGOF') 

R T T M N = 3 RTT /  FLOAT  <  NLOOF  ) 

DC  1 60  N=  1  -  NLOOF' 

DO  170  1  =  1,  £ 

D I  FRTM  (  I >  =RT  { I  -  M )  -MEAN  <  2  ) 

IF ( DIFRTM ( I ) .  LT.  0.  OOOOOOOOOOOOOOOOOOCOi ) GOTO  17! 

D I F  (  I )  =  <  R'T  ( I .-  N  )  —MEAN  <  I  )  )  **2. 

GOTO  170- 
DIF  -  I )  =0. 

3‘JMB I F <  I —  D IF  ( I )  +3UMD IF  C-X  ) 

RT  A  Ei  I F—  <  RT  AA  <  N )  —  RT  AAMN  )  **2. 

RTTE'IF®  ( RTT  ( N )  — RTTh’.N )  **2. 

RT  A£D=R'TAD  I F+RT  A3D 
R77'3D=RT7D I F  *R77SD 
CONT I NUE 
DO  180  1  =  1-3 

DEV  ( 1 )  =D3CiR7  ( EUND I F  <  I )  /  ( FLOAT  ( NLOOF' )  —  1 .  )  ) 

DE VRT A=E'SGR7 ( RTASO/ <  FLOAT  <  NLOOF )  - 1 .  ) > 

DEVR'TT =D3GRT  (  R7T3D/  <  FLOAT  <  NLOOF' )  - 1.  ) ) 

PRINT*,  "  " 

ART  NT*,  "  " 

PRINT*,  "  " 

PRINT*, "  RELIABILITY  ANALYSIS" 

PRINT*, “  " 

DO  190  1  =  1,  Si 
PRINT*,  "  " 

PRINT*,  "  ” 

PRINT*,  "  " 

PRINT*,  "  " 

IF- I.  EG.  1) PRINT*,  "  LOG  CAPTURE  TO  ARM  < 

IF(I.  EG.  2) PRINT*,  "  ARM  0/S  TO  G/S  CAPTl 

IF  (I.  £Q.  3)  PRINT*,  "  6/S  CAF'TUP:E  TO  AF'F'Rf 

IF<  I.  EG.  4) PRINT*,  "  APPROACH  ARM  TO  LAN] 


I F  <  I .  EGi.  5 )  F'R  I  NT  * ,  " 

IF  ( I.  EG.  i )  PRINT*,  " 

IF-!  I.  EG.  7  5  PRINT*,  " 
IF  (I.  EGi.  S) PRINT*.  " 


LOG  CAPTURE  TO  ARM  G/S" 

ARM  G/S  TO  G/S  CAPTURE" 

G/S  CAPTURE  TO  APPROACH  ARM" 
Ar’F'ROACH  ARM  TO  LANE*  ARM  (100  FT 

LAND  ARM  (100  FT)  TO  FLARE  ENGAGE  ( 

FLARE  ENGAGE  <45  FT)  TO  DECRAB  (2 

DECRAB  (20  FT)  TO  TOUCHDOWN" 
TOUCHDOWN  TO  STOP"' 


■  0  - 

PRINT*, "  " 

print*,  " 

MEAN  TIME  = 

",  XMEAN(I) 

.  ,'\s. 

PRINT*, " 

STD.  DEV.  OP  TIME  = 

" ,  STBDEV ( I 

PRINT*, " 

MTBF  = 

",  XMTBF(I) 

l 

PRINT*,  " 

VARIATION  = 

",  XF'ER 

:  '  z r 

:  P:  I  NT *,  " 

MEAN  OF  RELIABILITY  = 

" ,  MEAN < I ) 

PRINT*.  " 

3 7 El  DEV.  OF  RELIABILITY 

=  " ,  DEV ( I ) 

•  “ 

P'R If J7*,  " 

MAX  VALUE  = 

",  NUMAX(I) 

i 

-pint*,  ■■ 

MIN  VALUE  = 

",  NUMIN(I) 

o  o  o  o :  c 


r'rwN:*.  " 

IF  (I.  EC!.  1 /PRINT*. 
IF  (  I.  EQ.  2)  PRINT*, 


SYSTEM  OPERA T I  GNAi_  " 

NON— CRITICAL  FAILURE  AND  SUCCESSFU 


I F  ( I .  EG!.  3)PRIN7*.  "  CRITICAL  FAILURE  TO  SINGLE  CHANNEL  AND 


:■  0=” 

1SFUL  R'/GA " 

~0= 

IF  (  1.  EQ.  4)PF;INT*.  " 

WHEEL  Sr' IN— Up'  NOT  DETECTED  AND  SUCCE 

_  n. 

50= 

1  /GA  " 

?0= 

IF ( I.  EQ.  5)PRIN7*.  " 

NON— CRITICAL  FAILURE  DURING  ROLLOUT 

00= 

IF(I.  EQ.  6) PRINT*.  " 

BACK-UP  ROLLOUT  MODE " 

10= 

0  R 

IF (I.  EQ.  7) PRINT*.  " 

CRITICAL  FAILUF.'E  TO  SINGLE  CHANNEL  E* 

20= 

1 DLL OUT" 

50= 

IF  (I.  EQ.  S) PRINT*.  " 

LOCALIZER;  FAILURE  AND  SUCCESSFUL  R/GA 

IF(I.  EQ.  91PRINT*.  " 

inrt  i  »'  HAZARD" 

50= 

IF  1.  EQ.  10)  PRINT*. 

ATTENUATED  SAFETY  HAZARD  (NO  PILOT  VI 

_  i  i 

1Y)  " 

70= 

I F  <  I .  EQ.  11)  PR  I  NT  * » 

ATTENUATED  SAFETY  HAZAREi  (LIMITED  F’lL 

Z  -i*  I 

1EILITY) " 

r  r\  i  tv  i  >-i 


I  NT*  i  " 

PROBAE’ILI 

I NT*.  “ 

STD.  E iEv. 

I  NT*/ 

MAX  VAL'-'E 

I  NT**/ 

Ml (‘i  vAi_UE 

NT  I  ri’.;E 

L :  i’c 

SAFET t 

P DEV ( I ) 
PMAX < I ) 

r  M I N  \  I  ) 


DC  UE  L  E  ~~z.ll  :■  I  ON  P4G.  FT  ON.  R77N,  -FA  I  LI .  FFAIL2.  PFAILG.  DEL  (11) 
DOUE-E  :  r  £Z  is:  ON'  E;_il-  Z  F  5  ? EL  I .  EL2.  ELS.  EL4.  ELS.  ELS.  EL7. 
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m 


COMMON  .-MEAN,  PDEV ,  PM  AX  ,  r'MlN,  N»  NLGOr',  R7  oN,  RT7N 
RGA=DEXr ( —  1 .  * < 1 .  /MTBF ( 50 ) )  #T I ME ( 9 ) ) 

PROA ( 1 )  “  1 .  — <2.  *RGA )  +  < RGA**2.  ) 

RF.'OA  ( 2 )  —  (  2.  *ROA )  -  <  2.  *RGA*RGA) 

PF.OA  3 )  —  P.  3A*i*2. 

.PROA  ( 4 )  =  1 .  — ROA 

-  =  ga  •:  3 >  =poa 

FEDr'=L:EXF(-i.  *(  1.  /M7EF ( 30) ) *TIME ( &) ) 

FED\  1  5  =  1.  -D£XP'<-i.  *  ( 3L>M2&”  ( 2.  *(  1.  /MTBF  (30) )  )  )  •*  T I  ME  (  o  / ) 

FED  ( 2 )  =2.  *FEDr—  (  2.  *  (F£DF*#2.  )) 

FED ( 3 )  =  1 .  - ( 2.  *FEl>F  )  ■>•  <F£E«r"**2.  ) 

0(1) — T I ME ( 6 ) 

G  ( 2 )  *  T I  ME  ( 7 )  +  ( 1 .  /Co  00.  ) 

G <3)»TI ME ( 3 ) - <  1 .  /Go 00.  ) 

DO  POi  1  =  1,5 

EX  PL  1  =  ( DEXP  (  —  1 .  ■*‘0(1)  *EL  i  ))•*•(<  3.  —  ( 2.  *  ( DEXP  ( —  1 .  *0  ( I )  *EL2  ))))■* 

L .  —  (  2.  *  ( DEX’F  ( - 1.  *0(1)  *eL3  ))))*(  3.  -  ( 2.  «( DEXP  ( -1.  *0(1)  *EL4) )  )  ) 
EXF'L2=(  3.  -(2.  *(DEXF  (  —  i.  *0 ( I ) *EL3 5  )  )  ) * ( 2.  —  DEXP<  —  1.  ■*G(I)*EL6) 

12.  *  ( DE X P  ( - 1 .  *0(1)  ->EL7 )  )  )  ) 

LCCR ( I )  =EXFL1  *EXF'L2 
F  ATH  (  1 ,  N)  =FED  (  i  )  *E'RGA ( 1 ) 

P  ATH  (  2,  N )  =FED  ( 1  )  #RRGA ( 2 ) 

PATH  3,  N  >  =F£D  ( 1  )  *R'RGA  ( 3: ) 

P  ATH  (4,  N )  =FED  (  2  )  *R'RGA  (  4  ) 

PATH  ( 5,  N )  —FEE'  ( 2 )  *RRGA  ( 3 ) 

PATH ( o,  N ) =F ED ( 3 ) 

PATH ( 7 ,  N ) *RT oN 
F'F  A I L 1  =  1 .  — LOCR  ( 1 ) 
r  ATH  ( 30,  N ) =r ATH ( 1 ,  N) *FFAIL 1 
F'ATH  (31,  N )  “PATH  (2,  N )  *Pr  A I L 1 
F'ATh’(32,  N )  “PATH  (  3,  N)#FFAILi 
P  ATH <  33.,  N  >  =F'ATH  (  4,  •N)-*FFAIi_i 
F  ATH (  24, N 5 “PATH ( 5,  N ) *PFAIL1 
F  ATH  (  35,  N  >  “PATH  ( o,  N )  *r  FA IL 1 
F  ATH ( 3o, N ) - R7£N*RRGA ( 1 )*rFAILi 
PATH*  37-  “?.‘Toim*RR0A ( 2 / *F FAIL  1 
=  ATH (  3 2.  N >  =F.T oi\*r.RGA (3)’»?rHi^i 
D  ~  TF  “  E  E  X  r  ( —  1 .  *  ( 1 .  /  MTE  F  (  30 )  )  *  T I  ME  (  7  /  : 

Z~T -DEXrv-i.  *  (  30i‘m27—  ■.  2.  *(i.  .'MTE 
E’TT2-  <2.  *EiTTP >  —  ( 2.  ■»  ( E'77F**2.  ii 
D  T  T  3  -  1 .  —(2  ••'E'TTr  A  t  (  DTTr‘**2.  ) 

P  ATH  <  *,  M  >  =DTT  1  -*r,RGA  v  1  > 

=  A”H  ••  ?  ■  N )  -E'TT  1  '»r,F.GA  ( 2  ) 


F  < 30 )) * )*T I  ME \  7 )  > 
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r  rt  ;  “  ;  ^  *-u  i  i  ,i"r,.*v.:  r\  \  .* 

r  ATK  (  2  2-j  N )  =Em73; 

HATH  '*14,  N  ;  —  rv  i  7M 

7DWSP=£iEXr  ••- 2.  *i  2.  .,’MTEF  ( 3-0  i  >  **  (  2.  /3oGC.  /  1 

TD  2  —  1 .  -DEXr  (  - 1 .  *  (  3‘yM23— 2.  /M7£F  (  EC )  >  —  (  2 .  /M7EF  i  32  )  )  )  *  ( 1 .  / 300 

7D2=(  2.  ■»7DWSF  >—  \  2.  *  (  7DW:ir-**2.  )) 

7D  :- 1 .  ~  (  2.  #TEiwiSF  )•*<  TDW3P,**2.  ) 

7D4—  2.  — C‘EXr*(-2.  •*(  1.  /MTEF (3i  >  >*<  2.  /3o00.  )  ) 

7E'3=E'EXr  (  — 2.  -*3i.»M23*  (  i.  /3600.  )  > 

F  A  TH  (  23.  N )  —  TE>2 ^RROA {  2) 
r'A7H(  ii..  N)  -7D2*='RiEA (2) 

PATH  (  2  7,  i\‘ )  — 7D  i  *PF.GA  (  3  ) 

PATH  (  2  S*  N )  =7E'2#RRGA  (  4  / 

PATH  (  2  *?,  N )  =TE'2*RR0>A  ( 3 ) 

P A7H ( 20/ N ) =TE>3 


i  0* 

PATH  < 

22,  H )  =7D4-*F,RGA  < 

20= 

PATH  < 

22,  N )  =7D4^RF.GA  ( 

30= 

PATH< 

23a  N)=TD4*Rft3A< 

40= 

PATH  ( 

24, N)=TD3 

F  I  N325=E;EXF'  <  - 1 .  ■*(!.  /MTE:F  (32)  )*<7IME(3)  — (  2.  /3300.  ))) 

F  I i\i3 2  =  (  2.  •sFIN‘323 ) —  { 2.  *  <  ?  INS25**2.  )  ) 

FIN32-2.  -  <  2.  #r  INS23  >  + {FINS23^*2.  ) 

PATH  (  23,  Nt  —  i.  —DEXr  ( —  2 .  #(3<Jfl2®~(  2.  /MTEF <33/  )  )  •*  ( 7 1  ME  \  3 )  -  ( 1.  /3 

PATH  ''23/  N )  —  2 .  -D£X  r  i—i.  *  (  1 .  /MTEF  (  34 )  )  *  ( 7 1  ME  ( 3 )  —  <  2 .  /3oG0.  ) ) ) 

F  27-DEXr'  i  ~i  .  *(2.  /MTEF  (33)  )*(7iME(®)“<  2.  /  3.300.  ))) 

PATH (27/  N>  =  (2.  #P 27/  — (2.  •*<P27**2.  )) 

PATH <23,  N>  =  (2.  -(2.  *P27)-r(p27**2.  ))-r(j.  -DEXF<-1.  *U.  /MTEr  ( 36 
I E  ( S’ )  -  <  1 .  /  3*2. 00 .  ) ) ) ) 

PATH ( 29,  N)  =0£XP(  — i.  •*SUM2S*(TIME(S)  — (1.  /3300.  >)/ 

DO  902  1  =  2,7 

902  PATH  (  I ,  N )  =PA7H  (  I ,  N )  *LOC'R  {  1 ) 

F  FA  IL.2= 1 .  -L0CR'(2) 

r  ArH  ( 39,  N  )  —rr  AIL2*  <  2.  -DEXr'<  — 2.  *(SyM2S+<l.  /M7BF<  IS)  )  — ( 1.  /MTB 
2  •*  ( 7 1  ME  <  3 >  —  (  2 .  /3o00.  ) ) )  ) 

?40=DEXP  <  •* 2 .  *  <  <  2 .  /MTEF  ( 33 )  )  +  <  2 .  /M7 Br  ( 32 ) )  )  *  ( TI ME  (3)-(  1 .  /330 

r  A7H  ( 40,  N)  =  ( <  2.  *r  40)- <2.  *  <  P40**2.  )))'»PFAIL2 

rA7K(4i,r'i)  =  <<2.  -  <2.  *F'40)  +  <  P  40**2.  >  )  +  ( 1 ,  -l^EXF'  ( —  1.  *  (  2 .  /MTE'F  ( 2 

2MEC3)  —  <  1.  /3o00.  i ) )  )  ) «Fr  AIL2 

FA7H<  42,  !'i5=F'FAIL2’*E'EXP<-i.  #3UM2S*  <  TIME  ( S )  — 2.  /3c>00.  ))) 

P FA  I  L3=  2 .  -LG CP  <  2; ) 

PATH  <43,  N )  *LGCR  \  2 )  #PFA  I  L3*F'A7n  ( 39,  N  i 
PATH  (44.  M )  =LOCP  \2i  *PFA ILJ-^F  ATH  ( 40,  N ) 

PATH (43,  N)  =i_OCF; ( 2 > *F F AIL3->F‘hTH (42,  N) 

PATH  ( 43,  N )  =LOCR  ( 2 )  #F'FA I  L3*F  A7H  ( 42,  N ) 

E*0  700  I — .3 .-  2  4 

00  PATH ( I , M > =F  A7H ( I ,  M ) ^F  A7H (7,  N > 

DO  72  0  1  =  23,  24 

2  0  PATH  (  I  .•  ? i — F  A7H  ( I ,  N  >  ^PATH  (  2  4,  N ) 
r  —  23  i  =•*  =.,  ■*•«■ 

—  ? A“r. (  Z,  ■(.•  —  F'A7H(  I,  r<;*FATH(24,  N)*i.GCR(2)*uOCR'.  i  ) 

:  A  5  "  ~H  (  I ,  :'•<  '•  -P  ATH  (  I ,  ri  >  ->r  A7H  (  24,  ,\| 

FFEPEr-i 


i-.  :  .;■«««./  :  r><  i  i  i  v  ^  / 


“  .•  *  /  —r  h  i  n  \  *;!».•  ;*  / 

'  1  M}  -r  ATH(2ii  I'i.^rATni l?i  N : -pr  A7n(  42/  N) tF A7n ( 43/  N )  +F'ATH( 4c>, 

1  ■’  Jo.  i )  —.-AT H (  44/  N) 

“  4‘h-  r  :  H  <  i  .  W  .■  -F  ATH  ••  4,  :'m  )  -rr  ATn  <  2/  s’-i  >  rp  ATH  {  3.  t<i )  —  F  ATH  (  i  1 /  N )  ■’■PATH 

-  PA  i  H  <  1  T'j  N;tp  ATH  <  1  3 .  N  >  -PATH  C  20/  N  5  rrATh  (21  /’N  )  +PA7K  (  30  <  N )  —F'ATH 

1  PATH  (  33 1  N  >  ■pf  A7n  <  3o<  N  ) 

P  •!  ?',  M  )  -  F'SH—F  ATH  {  23/  N )  ■'PATH  '.41,  N  )  -PATH  <  45/  N  > 

F'(S/  N  >  —r  A7H  (  2i  /  N  )  +?  ATH  ( 3;2/  N  )  —FAT  n  (  34|  N )  —PATH  ( 37  <  N )  — PATH  ( 3S< 

'TENLATION  FUNCTION  WITH  NO  PILOT  VISIBILITY 
D7-7IME  ( 3  >  -  (  21.  /3600.  ) 

AT  1  )  =3. 

AT  <  2 )  =3.  9 

A  T  )  a’2;  /- 

AT  4 )  - 1 0.  2 
AT ( 3 ) = I 2. 

AT  (  >3 )  =  1 3.  4 
AT (7) -14.  9 


h  :  iv  /  =4 1 . 

DC*  600  I  —  i  .  10 

Pi  ( 1 )  =  0  E  X  F  ( —  1 .  *((1.  /M7BF< 33 > >  + ( 1 .  /MTEir  (26)  )  )*(  (A7(  I  )/360C.  ) 
A 1  r'“ 0  (I)  -=05 Xr  i  -  i.  *  (  ( 1 .  /MTBF  {  33  )}*(!.  /MTBF  (  32  )))*((  AT  (  I )  /3©0 


A 1  CATS (  I ) - 1.  -DEXr(—  i.  *(1.  /MTBr  (2©)  )*(  ( AT(  I  )/3©00.  )+DT)) 

P41 < I )=A1P40( I >+h1CA73( I ) 

PF41  <  I  )  =1.  -(2.  *F41  ( I )  )+(F41  (  I  )**2.  ) 

■  FF1  (!)  =  (!.  —  (2.  *F'  l(I))  —  (F'i(I)  **2.  ))  +  (!.  —  DEXF  ( —  1 .  *  ( 1 .  /MTBF  ( 36 

i  ( I )  /  3300.  )  —  OT )  )  ) 

DO  i- i  0  1=2/  10 

OF  F 4  1  (  I )  =r'F4 1  v  I  )  -FF4 1  <  I  —  i  ) 

>  OF  F  ( I )  =F'F  1  <  I  )  — F'F  1  (  I  —  i- ) 

F'2SA  i  —PP  1  ( 1  )  +  (  DF'F  ( 2 )  *.  9 )  —  (  DF  F  (2-)*.  8 )  *  ( Z'PF  ( 4 )  *.  7 )  +  v  DF’F  ( 5 )  *.  6 


i  3  J  *.  4 )  J-  <  OF  F  <  7 )  *.  2i-r\  DF'F  <  S)  *.  l)  +  (  D F'F  <’?)*.  05 ) 

F  4  1 A1  =r'F4  i  ( 1  )  (  DFF4 1(2)*.  '?)*(  OF  F  41(20*.  C')  +  (  CiF'F4 1  (4)*.  7 )  +  ( Cir' 

1 .  6 )  -  ( DF  F4 1  (  6 )  *.  4 )  -r  <  DF'F  41(7)*.  2)  +  (  liPF4  1  ( S )  *.  1 )  +  ( O'F'F  4 1  ( 9 )  *.  05 

r'43Al=F'41Ai 

P  ( 10/  N )  =F"3H+  <  r  22A1  *F'ATH (24/  N )  *LOCR  ( 2 )  *LOCR  ( 3 )  >  *  ( F'4 1  Al*PATri  ( 

!FAIL2)  +  (  P45A1  *F'AT  rl  ( 24/  N )  *LOCR  (  2 )  *F'FAI  L3  > 

'iTTENUAT  I  ON  FFNCTION  WITH  LIMITED  F'lLGT  VISIBILITY 
AT  2(1)  *3. 

AT2  ( 2  )  -5. 

AT21' 3  >=>;..  9 
DO  22 0  1  =  1/3 

-.2-  J-3 I  ) -DEXF  (-1.  *(  ( 1.  /MTBF (  35 /  )-p(  1.  /MTBF (32)  )  )*(  (AT2(  I  )/36 


A  2  I A  T  3  (  I  !  —  l.  — C;cXF’.  — 1.  *(i.  /MTE*F(2c)  )*  v  (  AT2(  I  )/*3c*00.  )+DT)) 
z  -  i  I  *  =  A2F'4v  I  -A2CAT3  ( I  / 

F  2  ■:  I  >  ~l  EXF  •.  - 1 .  ■,  1 .  /  MTBF  (  33  >  ;  *  (  t  A72  (  1  i  /  3c-00.  i  ~DT  )  ) 

rFPiAil')-!.  -<2.  *F 4 1 A (  1  )  > ( F 4 1 A \  I )  **2.  ) 


i  _  •.  i  /  .  . 

Drri-r F2 <  2 ) — F'F 2 < 1 ) 

DPF3-FF2 <  3 ) — FF2 <  2 ) 

DF'F412=F'F4i A<2)— PF4iAi  i  ) 

DF'F  4  i  3=rp4i  A  i  3  )  _F  r  4 1 A  i  2  ) 

P2SA2=r'F2 \  1  i-ri  DPF2*.  &)•*■( DFF3*.  1) 

F'4 1  A2=F'F 4  i  A  ■!  i  )  -r  ( £ip  F4  1 2*.  <*■ )  -*•  (  Dr'F 4 1 3*.  i  ) 

F'4?A2=r  4  i  A2 

P  \  1  i  <  N )  —  r  3H**-  (  F'2SA2*FA  i  H(24i  N ) *LGCF; i  2 ) *LOCR  ( 3 )  ) -r  \  F'4 i  A2*F'ATn  ( 


1  FA  I L2 )  *  i  F  43A2*F  A7H  <  24«  N )  *LOC'R  ( 2 )  *F'FA  I L-3 ) 

I F  •’  N.  GE.  2 )  GOT 0  7 
DO  330  I * i  i  i i 
SUMP  (  I )  =0. 

330  SUMD I P  ( I )  =0. 

7  DO  340  1  =  1,  il 
340  SUMP  i  I )  —r  (.  I  <  N )  +SUMP I ) 

I F  ( N.  EG.  i  )  GOTO  302 
DO  SOi  1=1,11 

PM  AX  <  I )  =DMAX  !  ( P  ( I ,  N ) ,  F'MAX  <  I )  ) 

SOI  PM I N < I >=DMINi (P( I,  N)i  PMIN( I ) ) 

GOTO  S04 

302  DO  303  1  =  1,  11 
F'MAX  <  I )  =r  •!  I ,  N ) 

303  F'M  I N  ( I  >  =F  <  I ,  N ) 

304  IF<N.  NE.  NLOGF'/GOTO  750 
DO  330  1  =  1, 11 

330  P MEAN  •:  I )  *SUMP  <  I J  /FLOAT  <  NLOOP  ) 

DO  330  ■_•=  1  ,  NL OOF- 

DO  37 0  1  =  1(11 

DEL  ( I  )  =F  <  I  (  J )  — r'MEAN  ( I ) 

I F  <  DEL \ I ) .  LT.  0.  000000000000000000001 ) GOTO  300 
D I FP  ( I )  =  <  P  <  I  (  J )  —  PMEAN  ( I ) )  **2. 

GOTO  370 
300  0 1 FF  <  I  >  =0. 

37 0  SUMD  I  r'(  1 )  =D  I  FP  ( I )  +SUMD  IP  ( I ) 

3-30  CONTINUE 

DO  330  I  =  1  (  11 

330  r'DE V  ( I )  “DSQRT  ( SUMD  1  r  ( I  /  /  ( FLOAT  <  NLOOP )  —  1 .  )  ) 

750  RETURN 
END 


Reliability /Safety  Analysis  Results 
(Category  III  Adapter  System  Configuration) 
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Not  Vary  Either  Equipment  MTBF 
Or  Segment  Time  Intervals 


*aT  *  U.  ».#j 

>ANS  =  1 , 

>5END* 


S~t>  BeV. 


RELIABILITY  ANALYSIS 


LOG  CAPTURE  TO  ARM  G/S 


MEAN  TIME  = 

210. 

STD.  DEV.  OF  TIME  = 

0. 

MTBF  = 

1 4.  08233457 1 86375256847597 1 

VARIATION  = 

0. 

MEAN  OF  RELIABILITY 

*  .  99586270431390024978121212 

STD.  DEV.  OF  RELIABILITY  «  0. 

MAX  VALUE  = 

.  99536270431 390024973 121212 

MIN  VALUE  = 

.  9953627043 1 390024978 121212 

ARM  G/S  TO  G/S 

CAPTURE 

MEAN  TIME  = 

30. 

STD.  DEV.  OF  TIME  = 

0. 

MTEF  = 

13.  696532445454939 130450203 

VARIATION  a 

0. 

MEAN  OF  RELIABILITY 

a  .  999391225525913424011936132 

STD.  DEV.  OF  RELIABILITY  *  0. 


MAX  VALUE  = 
MIN  VALUE  » 


.  99939 12255259 1342401 15-361  S3 
.  99939 1 2255259 1 342401 1 936 1S3 


G/S  CAPTURE  TO  APPROACH  ARM 


MEAN  TIME  * 

STD.  DEV  OF  TIME  = 

MTBF  = 

VARIATION  — 

MEAN  OF  RELIABILITY  *= 

STD.  DEV.  OF  REL I AE.’  I L I TY  - 
MAX  VALUE  » 

MIN  VALUE  » 


30. 

0. 

1 3.  0 1 080703 1 4495S26035939506 

0. 

.  999359 17S87U404S 152942464 

0. 

.  9993591 7SS7 1140431529424641 
.  9993591 7337 1 1404£:1 529424641 


APPROACH  ARM  TO  LAND  ARM (100  FT) 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  a 
MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  =_ 
STD.  DEV  Or  RELIABILITY 
T.h  X  VALUE  a 
l  N  VALUE  a 


31.  54 
0. 

10.  479443 
0. 

.  99733951 
0. 

99733951 

99733951 


9232769909033732433 

326  97332 1 30 1 576374 9 

32697332 i SO 1 576375 
32697332 1 30 1 576375 


07. 

a  O. 
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LAND  ARM  (100  FT )  70  FLARE  ENGAGE  (45  F7) 


40= 

MEAN  TIME  = 

5.  35 

STD.  DEV.  OF  TIME  = 

0. 

M7BF  = 

10.  311 09507034325401 15214577 

70= 

VARIATION  = 

0. 

so* 

MEAN  OF  RELIABILITY  = 

.  .  99935573790354371731415455 

90= 

STD.  DEV.  OF  RELIABILITY 

=  0. 

00= 

MAX  VALUE  = 

.  9993557 37 90354 37 173141 5455 

10= 

20= 

20= 

40= 

•50= 

MIN  VALUE  = 

.  9993557379035437 173141 5455 

60= 

■70= 

FLARE  ENGAGE  <45  FT) 

TO  DECRAB  (20  FT) 

•80® 

MEAN  TIME  = 

3.  07 

190= 

STD.  DEV.  OF  TIME  = 

0. 

•00* 

MTBF  = 

1 0.  5235424 1 04665592 1 09403643 

v  i  o» 

VARIATION  = 

0. 

20= 

MEAN  OF  RELIABILITY  = 

9999 i 095 i 9503925 1221 3 1 43045 

'■30* 

STD.  DEV.  OF  RELIABILITY 

*  0. 

■40= 

MAX  VALUE  = 

.  9999 1 395 1 9503925 1 22 1 3 1 43046 

-'50= 

v60= 

••70= 

-30= 

s90= 

MIN  VALUE  = 

.  9999 1 395 1 9503925 122131 43046 

>00= 

DECRAB  <20  FT)  TO  TOUCHDOWN 

>2c'-r->v 

MEAN  TIME  = 

4.  02 

•30= 

STD.  DEV.  OF  TIME  = 

0. 

•40= 

MTBF  = 

1 0.  5235424 1 04665592 1 09403643 

50= 

VARIATION  = 

0. 

•SO* 

MEAN  OF  RELIABILITY  = 

.  999393373266497565505673993 

>70= 

STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 

*  0. 

/cO— 

>90= 

.  7770 7-ZfCf  / O-iC-OHy  / D6vtjUjO/n 

.  999S93S73266497565505674 

:  00= 

.  1 0= 

120* 
i  20= 

.40=  7GUCHDGWN  70  STOP 


50= 


•.0s 

MEAN  TIME  = 

70= 

STD.  DEV.  OF  TIME  = 

30= 

MTBF  = 

90= 

VARIATION  = 

00= 

MEAN  OF  RELIABILITY  = 

10* 

STD.  DEV.  OF  RELIABILI 

20= 

MAX  VALUE  = 

30= 

MIN  VALUE  = 

22.  72 

0. 

13.  64220801001 11709932156131 

0. 

.  9995363330 13751 35340245994 1 
*  0. 

.  9995363330 1 375 1 35340245994 1 
.  9995363330 13751 35340245994 i 


TOTAL  RELIABILITY  FROM  APPROACH  ARM  TO  STOP 


MEAN  OF  RELIABILITY  = 
STD.  DEV..  OF  RELIABILITY 
MAX  VALUE  = 

M  *  *1  »  •  A  »  I  a» 


.  9970469 1 4563434665 1 5740277 
1 .  1 670531 7994974666232604073E-27 
.  997046914563434665157402771 

c>*-7a.i  *  o  i  j  =..t  r j  i  =, i  «;7jri'/?7 1 
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TOTAL  RELIh£:ILITY  FOR  COMF’LETE  MODEL 

MEAN  OF  RELIABILITY  *  .  991631473263029751090244 
STD  DEV  OF  RELIABILITY  ■  1.  01432335213021443397916 
MAX  VALUE  =  .  991631473263029751090244 
MIN  VALUE  =  .  991631473263029751090244 


SAFETY  ANALYSIS 


SYSTEM  OPERATIONAL 

rROE'ABILITY  *  .  999349936460438 1 54036593 1 34 

STD.  DEV.  =  0. 

MAX  VALUE  *  .  999349936460433154036593134 

MIN  VALUE  *  .  999349936460438 154Q86598 134 


NON— CRITICAL  FAILURE  AND  SUCCESSFUL  R/OA 

PROBABILITY  «  .  000202707 1329959 133633584 2 4 733 
STD.  DEV.  *  0. 

MAX  VALUE  =  .  000202707132995913363358424733 

MIN  VALUE  »  .  000202707132995913363353424733 


RITICAL  FAILURE  TO  SINGLE  CHANNEL  AND  SUCCESSFUL  R/OA 

PROBABILITY  =  .  00000413854950139494397927334372 
STD.  DEV.  =  0. 

MAX  VALUE  =  .  00000413354950139494397927334372 

MIN  VALUE  =  .  00000413354950139494397927334372 


WHEEL  SPIN-UP  NOT  DETECTED  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  5.  02405502387034 17 125033055 IE-7 

STD.  EiEV.  •  0. 

MAX  VALUE  *  5.  02405502337034 1 7 1 250330552E-7 

MIN  VALUE  =  5.  0240550238703417 1250830552E-7 


NON-CRITICAL  FAILURE  DURING  ROLLOUT 

PROBAB I L I TV  =  000400762796976050400 1 64912 1 03 

STD.  DEV.  »  0. 

MAX  VALUE  =  .  000400762796976050400164912103 

MIN  VALUE  =  .  000400762796976050400164912103 


BACK-UP  ROLLOUT  MODE 

PROBABILITY  *  .  0000041500333977 15130153361491 16 


to  to  cn  to 
cn  cn  to  cn 
c-  o-  cn  o- 


i  mi  '  nil  inifir-'ilii ii 


BACK-UP  ROLLOUT  MODE 

PROBAE I L I TV  =  .  000004 1 5003S8977 1 3 1  SO i 53*6 14911 6 
STD.  DEV.  =  0. 

MAX  VALUE  =  .  000004 1 5003SS977 1 3 1 SO 1 5386 149116 

MIN  VALUE  =  .  000004 1500333977 151 SOI 53S61 491 16 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  DURING  ROLLOUT 

PROBABILITY  =  .  0000046 10614991 533 1 5 1 90036962373 
STD.  DEV.  —  0. 


30= 

PROBAE:  IL I 

?o= 

STD.  DEV. 

00= 

MAX  VALUE 

i  0= 

MIN  VALUE 

20= 

40= 

30= 

• 

LOCALIZER 

70= 

PROBAE I L I 

ii 

o 

•V* 

STD.  DEV. 

*0= 

MAX  VALUE 

•:*<0= 

- 

MIN  VALUE 

m  V 

.20= 

.50= 

.*tv= 

SAF 

50= 

60= 

PROBAE I L I 

70= 

STD.  DEV. 

MAX  VALUE 

rtf*’ 

MIN  VALUE 

ii 

■>  o 
>  »•! 

20= 

'SO* 

ATTENUATED 

40= 

50= 

PROBAE ILI 

60= 

STD.  DEV. 

70= 

MAX  VALUE 

so= 

MIN  VALUE 

90= 

00* 

X  0= 

20= 

ATTENUATED* 

30= 

40= 

PROEAEILI 

30= 

STD.  DEV. 

60= 

MAX  VALUE 

7  0= 

MIN  VALUE 

<  _» 
tu 
* 
II 

in 

R 

90=1 

CSS  NOS/E 

00= 

X 

.37.  S3.  PAT  I A 

.  0* 

ro 

37  33.  Ir'  0 

i  c 

57.  .£&.  phT  (7 

•.  yj  — 

.  37  2S.  SINGE 

i 

.  1  '  -tv.  Ai  TAC 

. 

1 1 

37.  40.  MAP  ( P 

.vjS 

1C 

.  37.  41.  LOO. 

_  « 

4  *• 

: 

2  ,\tt 

i 

T/7  7i_v 

-  - 

SAFETY  HAZARD 

ILITY  =  .  00003 
V.  =  0. 


ATTENUATED  SAFETY  HAZARD  <NQ  PILOT  VISIBILITY) 


ATTENUATED  SAFET>  HAZARD  (LIMITED  PILOT  VISIBILITY) 


2.  379  CF  SECOND'S  EXECUTION  TIME 


Run  #  2 


Only  Varied  Equipment  MTBF 


141 


R£L I AE I L I TY  ANALYSIS 


\PU  k  '  10*0 
<DTDt>6  v.  -  O  - 


LOC  CAPTURE  TO  ARM  0/3 


MEAN  TIME  = 

STD.  DEV.  Or  TIME  = 

MTEF  = 

VARIATION  - 
MEAN  Or  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 


210. 

0. 

1 4.  S 1 S 0 S 0 5 0 S 7 2 0 S' 0 55 S'?' 2 7 15133 
.  1 

.  99534 943028874032937 1 283368 
.  0000332563237373974379022163024 
.  99303327 14151 22342305602 1 99 
.  9953490 1791 3393 1 7027304 1 43 


ARM  0/  3  TO  0/  S  CAPTL'RE 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTEF  = 

'VARIATION  = 

MEAN  OF  RELIABILITY  — 
STD.  DEV'.  OF  RELIABILITY 
MAX  VALUE  * 

MIN  VALUE  = 


1 3.  8025863532393 1 553694334 1 6 

.  1 

.  99933913247542234357342903 
.  0000083099606754740 1 2050 1 9762645 
999 42203323953 1 305 1 54533542 
.  999330321 350233348387937285 


0/3  CAr'TL'RE  TO  APPROACH  ARM 


MEAN  T I ME  = 

STD.  DEV.  OF  TIME  = 

MTEF  = 

VARIATION  — 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  = 


1 3.  1 373723305533057 1 75275343 

.  1 

.  99935c* 937374932309349503763 
.  0000100272740412622S1 9033177332 
99939 096357200500343 1 337433 
.  999327403321 133251252656931 


APPROACH  ARM  TO  LAND  ARM (100  FT) 


mean  time  = 

STD.  DEV.  OF  TIME  = 

MTEF  = 

VARIATION  - 

MEAN  OF  RELIhEILI  i  "t  = 

E~D.  DEV.  OF  RELIABILITY  = 

vi  I N  v  v—  = 


31.  54 
0. 

10.  53546*263*31 56*74337401 10429 

.  1 

.  99733 1 6*87 0507477396*05 1  3*63  1 8 
.  0000234644 1  341 22234094970237077 
.  9 9794 5 S 1 9 0 0 3 1 00 3 1 9 2 3 7 3 9 4 7 
.  99773232359236*7 4*33055285282 


142 


;ZIjgS£glZ2?I 


?0*:‘ 


fO= 
00= 
1  = 


.4.;,= 


LAND  ARM  <100  FT )  70  FLARE  ENGAGE 


<45  F7) 


MEAN  TIME  = 

STD.  DEV.  OF  7 1  ME  = 

MTBF  = 

VARIATION  — 

MEAN  OF  REL I AE- ILI TV  = 

STD.  DEV.  OF  RELIABILITY  = 
MAX  VALUE  a 
MIN  VALUE  = 


»>.  VO 

0. 

1 0.  4053 1 549437233 1 3925920006 
.  1 

999353239947 22395594 3882233 
.  00000 1 3535 i 2997 13371121 720333 191 
.  999:332307 457  9  i  3075955252: 1 95 
.  99934353272929 1 597083438824 


FLAr.E  ENGAGE  (43  FT)  TO  BECRAB  <20  FT) 


MEAN  T I ME  = 

STD.  DEV.  OF  TIME  = 

MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  * 

MIN  VALUE  = 


3.  07 

0. 

1 0.  334033549721 43 1 440 1 324032 
.  1 

.  9999 1 337 4 1 033903 1 53 151 334 1 S 
.  00000103474355473435422373935295 
.  99992301 370334 3 7 3 3 334 3 30134 
.  9999 1 4397532325373359 151 599 


DECRAB  <  20  FT )  TO  TOUCHDOWN 

TIME  = 


MEAN  TIME  = 

STD.  DEV.  OF 
MTBF  = 

VARIATION  = 

MEAN  OF  RELIABILITY  - 
370.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 

MIN  VALUE  a 


TOUCHDOWN  TO  STOP 


4.  02 

0. 

1 0.  33403354972 1 43 14401 324032 
.  1 

.  99939350945335333 1 3 1 9027732 
.000001394193172349345131 07770333 
.  9993991 957 1 54 1 00335 1 0583088 
.  999333534399703329500437327 


:v— 

MEAN  TIME  * 

22.  73 

STD.  DEV.  OF  TIME  a 

0. 

SO- 

MTBF  = 

13.  36339295279' 

V  0  = 

VARIATION  = 

.  1 

oo= 

MEAN  OF  RELIABILITY  a 

.  9995352383350: 

10  = 

STD.  DEV.  OF  RELIABILITY  * 

.  0000079391147: 

zo~ 

MAX  VALUE  a 

.  9995323315583! 

30= 

MIN  VALUE  = 

.  99951133154431 

rOTAL  RELIABILITY  FROM  APPROACH  ARM  TO  STOP 


MEAN  Or  RELIABILITY  = 
STD.  DEV.  OF  RELIABILITY 
MAX  VALUE  = 


.  99 70333.0339 1 334054970397923 
.  00005333743243003397727741 9379S 
.  9971951 355 1 32 1 2737490543 1 34 


1 


TOTAL  RELIABILITY  FOR'  COMPLETE  MODEL 

MEAN  Or  RELIABILITY  =  .  99 1 0534647 1 29635 1 1437 17394 

STD.  DEV.  Or  RELIABILITY  =  .  0001763:6956911131057695794395 
MAX  VALUE  —  .  9?21 i5784257i7o63634S917964 

MIN  VALUE  =  .  991277300139597403103315353 


SAFETY  ANALYSIS 


SYSTEM  OF'ERAT  I ONAL 

PROBABILITY  =  .  99934770 1  3322405396768  1 5498 
STD.  DEV.  *  .  00001 031 101 628452453900285521 09 

MAX  VALUE  =  .  9993858:267599308:32718572314 

MIN  VALUE  —  .  ? 9 9 3 1789042342953 5 0 2 S 7 2 5 S 5 4 


NON- CRITICAL  FAILURE  AND  SUCCESSFUL  R/OA 


r  ROE'AB.  IL I  TV  =  .  00020343  -26433  i  47363S 141151  £57 
STD.  DEV.  —  .  0000027746465054 1 6S3S334376672 

MAX  VALUE  =  .  000212532077092695143641973792 
M I N  VALUE  =  .  000 1 923 1 35 1  S'77 1 2546 1 392637 1114 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  ANEi  SUCCESSFUL  R'/GA 

PROBABILITY  =  .  00000417249046373535923156260161 
STD.  E'EV.  *  1.  75591 36477679369090334 1232E-7 

MAX  VALUE  =  .  00000464427233239566964750531241 

MIN  VALUE  =  .  000003321361255793573203319400 99 


WHEEL  SPIN— UP  NOT  E'ETECTEEi  AND  SUCCESSFUL  R/GA 

PROBABILITY  =  5.  00073451 161 759469392736 155E-7 
STD.  E'EV.  =  2.  0923093579 1 200759479396946E— 3 
MAX  VALUE  =  5.  5730036544 1 025925770756342E-7 
MIN  VALUE  =  4.  59406093661 153 14 5404652 143E-7 


NON— CRITICAL  FAILURE  DURING  ROLLOUT 

PROBABILITY  =  .  00040201  '3505653495 173369543764 
STD  E'EV.  =  .  00000733 1 3233294655500223 1 056902 

MAX  VALUE  =  .  00042562446329334671 054 165691 4 

MIN  VALUE  =  .  0003:707 64 3471 046 10959390344041 


BACK-UP  ROLLOUT  MODE 

rP uEm&ILITY  *  .  000004 1 642255330250 1914 334432039 


wrivis-wr  n'.'uuu1.'  i  nvi-'C. 

PROBABILITY  =  .  000004 16422553802501914384482039 
STD.  DEV.  =  i.  8563:2431 1471 2085627 1 725223E— 7 

MAX  VALUE  =  .  00000460116022041 1498: 124246 122 IS 

MIN  VALUE  *  .  0000037 8570603948040369958903803 


CRITICAL  FAILURE  TO  SINGLE  CHANNEL  DURING  ROLLOUT 

PROBABILITY  =  .  0 0 0 0 0 4 6 0 5 4 7 2 9 5 1 5 6 3 6 0 8 7 4 9 S' 9 7 2 5 9 3 3 
STD.  DEV.  =  1.  96977 1 06050394 1 492893372 1 E-7 

MAX  VALUE  =  .00000511738679841756783630954031 

MIN  VALUE  —  .  000004 1 9208293 1221 33643485963778 


LOCALIZER  FAILURE  AND  SUCCESSFUL  R/OA 


PROBAB I L I TV 
STD.  DEV.  = 
MAX  VALUE  * 
MIN  VALUE  — 


3.  579877392995 151641 2700S377E-8 
1 .  2463429223700 1470151 697 1 09E-9 
3.  9 1  6.856-77 46034378:249 1 3S7993E~3 
3.  28 1 09536 10151725131 2293 1 35E-3 


SAFETY  HAZAREi 


PROBABILITY 
S.TD.  DEV.  * 
MAX  VALUE  * 
MIN  VALUE  » 


00003268095525401 82496736279336 
00000 1 393675800297205 1 96 1 1 705339 
0000363753552060 146 98 1 1 0257 6679 
000029901703697426 1 999355955662 


INUATED  SAFETY  HAZARD  (NO  RILGT  VISIBILITY) 


FRO SAB I L I TV • : 
STD.  DEV.  = 
MAX  VALUE  = 
MIN  VALUE  = 


.  0000 1 992050 1 3078987443608:832449 
8.  494904531 302257676934 1946SE-7 
.  0000221723355630043173046616065 
.  0000 1 822647832957229344468958 1 2 


ATTENUATED  SAFETY  HAZARD  {LIMITED  PILOT  VISIBILITY) 


PROBABILITY  = 
STD.  DEV.  = 

MAX  VALUE  = 
MIN  VALUE  = 


.  00000920431 6.9 1 77700305293 1 543882 
3.  92521 73545440970907553 1399E-7 
.  00001 024482664523348570 1 356 131 
.  00000842 1 55564345798 1 54 1 40280838 


1 


=  1  03  B 

>-  i  4 
-  14 


.=  ;  4 


NOS/EE  L414H  ECS  CYBR  CMR3  R.  D  14.  18 
23  54  PATIAFN  FROM  /IA 

23.  54.  IP  00000256  WORDS  -  FILE  INPUT  ,  DC  00 
28  54.  F  AT  <  T25,  1050,  CM 100000.  STCSB)  D760276,  BUS 

23  54.  SINGER,  UD« 229-4238 

24  0 3.  ATTACH (  LGO,  AWL32E: IN,  C t’*  1  ) 

2  4  - .  MAP  <  P  ART  ) 

2  4  .  0  *•  L'SO. 


(CD  Oof- 


Or 


2.  907  CP  SECONDS  EXECUTION  TIME 
OOOClSc'4  WORDS  —  FILE  OUTPUT  /  DC  40 
WORDS  <  S5S4  MAX  USED) 


!  AAr-ACi 


:  ir.rric  mav  r  mi  im 
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APFROACK  ARM  TO  LAND  AR'M<  iOO  FT) 


i-  •  rMI  .  L.  .  I 


Si.  54 
1  '•*  9 
0. 

[  ^  y  •  4  -■  c*  3  v  7  4  4  0 0 0 o  2  &  734  y  2  5  3*  7 

■ui~’  “  ii304«-473®74i??03S5 

*  . .  '? 1  4 7  2. 0 v 3- 3 4 3: 2 9 £  l 

•  "  *'  •■*  v'  *  -  -  "  i  7  74  ?7  4477 
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.  tiv.  it  i  iris 


v.--  i  M  i  .  i.  :  i  — 

MEAN  Or  RELIABILITY  — 
?T.  DEV.  OF  ScL  IAE I <_  1 1 


.  42 

1  0.  2;i  1 0350703432540 1  1 32 i  4577 

0. 

•?  392*53c>7942*  1 2  307  2* 7 2*  1 6 0 3 25 0 9 
.  00000720 9  7 5 3 2: 7 2 2: 0 2*2:*2 32 4 2*  1 4 23 9 794 

.  9 9 92*' 2*  i  7  9  047 0 4 9  3 *7; S'  2: c* 2*3  9c*2*o*:*4 


N=LARE  ENGAOE  (43  97/  70  E'ECRAE:  (20  FT) 

!A?*i  TIME  —  3.  07 

D.  DEV.  OF  TIME  -  .  32; 

BF  —  10.  3 2 2* 3 4 2 4 1 0 4 2*  2* 3 5 9 2 1 0 9 4 0  3  2*  4  2*' 

•0  s*  VAR I  ATI  ON  *  0. 

IC*=Vv  MEAN  OF  RELIABILITY  -  .  9999' 20547542*234103541327732 

:v*  ■  2*7 Ei.  DEV.  OF  RELIABILITY  =  .  00000552*2*7 3.3572*942 1 922*7 06969312 i 


\ MAX  VALUE  — 
MIN  VALUE  - 


.  999 92:940 1  Or' 2 9 9 4243 9 290 0 2* 0  7  6 
.  9999037 433422*222:90335022:62*2: 


Dc.CF.AD  (20  FT)  TO  7 OUCnEiONN 

MEAN  TIME  -  4.  02 

37E'.  DEV.  Or  TIME  —  .  33 

NTEr  =  10.  3 2 3 3 4 2 4 1 0 4 2* 2*55 9 210 9 4 0 3 6 4 3 

VARIATION'  -  0. 

MEAN  OF  RELIABILITY  *  .  999393901374475034722544419 

STD.  DEV.  OF  RELIABILITY  =  .  0000049306099 2 1379056 1463420569 
MAX  VALUE  —  .  99991 421 6731 377947.32271 2:01 9 

MIN  VALUE  “  .  99937902:2:74 1 3360406332:1 222 


TOUCHDOWN  tO  2:7 OF' 


i*iC!-!iv  i  :r!£  — 

:TD.  DEV.  OF  TIME  = 

VARIATION  * 

MEAN  OF  RE LIABILITY  = 
3TE>.  E'EV.  OF  REL I AB I L I TY 
MAX  VALUE  - 
M I N  VALUE  — 


1 2:.  2*42202:0 1 00 1117 09932 1 52*  1 3 1 

0. 

.  9  9 9 5 3 6 0 4 3 7 0 2* 4  S3 2 7 5 3270333 3 4 
.  000002*237 92:362* i 62:4932952:422:02*437 
.  99955749353G00396S'665'974326 
.  9995 1 2*2307 6323472:42:2S:3042:29 


TOTAL  RELIABILITY  FROM  Ar'r.RGACH  ARM  TO  2*7 Or' 


i  OF  REL  I  ABILITY  «  .  9970536)02.36300  37236377 02349 

z~l-  DEV.  Or  RELIABILITY  —  .  OOOO45*OlI*32*iOic'2336.0>2*2*3'*.:'65c*S3c*6i 

"  .  -i'AL*  z  -  •  9  9«*9  334  91 72222*342*  373290233 
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’■r  REI_  i  ADI  i_  I  TV 


.  I  .  VMiVC 


.  y  y  1  i-SSi  2  ?05 1  £04024  1  1  27 
.  0C<C,0446*426?,i  1 224:477 c-47 
.  y  y  i7  ?60052c-4-.;. v 4203? 22 1 
.  ??1 374c-2S4F:vS'?C'24535423 


SAFETY  ANALYSIS 


SYSTEM  Or ERA i ZONAL 

?  AOEAS I L I TY  —  .  v  ?  F33G77 4F5227 i  02.397373*30  i  9 
Z‘ ;  D.  Eiw'v.  —  .  0GiX*O?07077?44234324F2r 663674* 

MAX  VALUE  —  .  ?9'’93S7943’51  1 4S77S:7S4f 033036 

MIN  VALUE  =  .  9  9  9  S  0  9  !•  2  S-5 7 2 3 7 2 -3  i  3  9  S  2  O 9  4?  0  7 


NON— OR I T I CAL  FA I LURE  AND  3 U 0 0 E S3 r  LL  n/Oft 

~  ”  OEAE  !•_  I  TY  -  .  00020  ill  660664S44S  43646077  9  1 1 S 
STD.  DEV.  =  .  0' 0 0 0 0 7 6 <;■  9  3  2 S -3  9 335 >0 2 3 6 6 *3 3 64037  176 

MAX  VALUE  -  .  000226727 0 73 4 0 6 7 3 3 0 4 G  0  -  3  S' 3 6766 

MIN  VALUE  =  .  000 1 73-39  i  696  i  3 1  926SS  1  S623236  i 


OF  I T I CAL  FAILURE  TO  SI MOLE  CHANNEL  AND  SUCCESSFUL  ft/GA 

FROEAEILITY  -  .  000004 156708006958777 1 07.3301 4 955 
STD.  DEV.  =  i.  3S34  1  478950 1  63207585677343E-7 
MAX  VALUE  =  .  0 00 0 0 4 6 6 '••■4232056 3 9 S i S i  i 06940 1 339 

MIN  VALUE  —  .  00000303  i  7 1 4  34404  i  SSi  S  i  SR  1  3760S9 


NnEEL  Sr  IN— UP  NOT  DETECTED  AND  SUCCESSFUL  R/GA 

r  ROE  AEI L I  TY  *  3.  0240631301  93"9092694926SSi4E— 7 
STD.  DEV.  =  3.  *’3470;  33033376330321 004723E- 12 

MAX  VAt_UE  —  3.  024 1  924-3S3-535374636S20 1 S 1 3E— 7 

•MIN  VALUE  ■=  3.  023931 3774SCG301 343S77S3 i  3E- 7 


NON— CRI TIDAL  FAILURE  DURING  ROLLOUT 

:  FOE  AE  I L I T  Y  —  .  000401 31 3693030303:7  44S73 1  38195 
:  TZ'  DEV.  =  .  00000571 9033SG0672SSS4523643623! 

’V.  X  VALUE'  —  .  0004 1  946463352236  i  3292063 1 0656 

•'!;.•  vA^UE  —  ,  000332  ■  0366267 294336303 1 23c37* 


-  r  r.VuLyv  i  rytt 

•  -  I  2  .’i3 1  l.  I  T’t  *-  .  000004  i  377431  3 :  4c  3-^32  2  ••  9  ~4G  r  -64 
~ _  IE’.'  -  3.  3 1 G 2 7  9  3 1 7 6 7 2 6  9  2  6  9 0 1  *  1 4  3 3  9  E  - 3 

—  DOGGO-  3  3  s 3'04>:.  3--  z  SvO  i  7  9  3~S  1 0*7 6  i 
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Ul  M  01  K> 


*»-' 


Run  #  4 


Varied  Both  Equipment  MTBF 
and  Segment  Time  Intervals 


151 


•/ 


MEAN  time  — 

STD.  DEV.  Or  TIME  * 

MTEr  = 

VAR  I  AT  ION  = 

MEAN  OF  RELIABILITY  = 
STB.  DEV.  OF  RELIABILITY 
MAX  VALUE  =■ 

M I M  VALUE  * 


30. 

0. 


u\ 

1 


1 3  73723805 3 6 6 0 5  7 1 75275343 


9993569137374982309649503763 
0000  i 00(2727404 1 26223 1 9033177332 
99939096357200500843 1 337438 
99932740332 1 18625 1 25265693 1 


Arr ROACH  ARM  TO  LAND  ARM <100  FT) 


MEAN  TIME  = 

*B.  DEV.  OF  TIME  = 


n  :  r  - 
VAR I  AT  I ON 


*  —  IMClLi  I  ’  - 

Or  REL I  A.B:  I  l.  I T Y 


81.  54 
1.  95 

10.  58546268315674837401 10429 
.  1 

997837  9137285320253 1 39506894 
.  0000377?: 74475 1 33911 155696433087 

.  397  638  06c  6376S20-34  9  6  356-67 


_ -*  j  #B  9  r  M  ■  1  .  FT;  TO  FLARE  EN-OAcE  <45  F T  1 


i  i 
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LANE*  Mr?!  •  100  FT )  70  F 

* 

LARS  ENGAOE  ( 45  FT ) 

10= 

MEAN  TIME  — 

5.  35 

-  •>_= 

ETE<.  E'Ev.  Or  TIME  = 

.  42 

■(i: 

MTEF  = 

1 0.  4053 i 549487263.' i 39 25 92 000 6 

VARIAilON  = 

.  1 

1 V  “ 

ME  A;-;  OF  RELIABILITY  = 

.  9993550.4604 735933940 1 540936 

* 

STD.  DEv.  Or  RELIABILITY 

=  .  00000/430730 i 3325932325690335407 

MAX  VALUE  - 

.  9998833 i 3972550463054479352 

L  .I.  _ 

MIN  VALUE  * 

.  999330925097 1 3753059933 1412 

‘■0— 

FLARE  ENGAGE  (45  FT) 

TO  DECRAB  (20  FT) 

-  V  = 

MEAN  TIME  = 

3.  07 

:  C  — 

'STD.  E>EV.  OF  TIME  * 

.  -2' 

:  0  = 

MTEF  = 

1 0.  634033549721 4314401 324032 

7- •.;:•■= 

VARIATION  = 

.  1 

:  C- 

MEAN  OF  RELIABILITY  = 

.  9999202  343 14527072033392329 

-  :;= 

STD.  DEv.  QF  REL I AB I L I  TV 

=  .  0000056 3699394356722672364200335 

r 

MAX  VALUE  = 

.  999939 1 20324 174271 537594036 

;.;■■  = 

M I N  VALUE  - 

.  99990202134220593 1 240435 1 69 

;0« 

DECRAB  <20  FT)  TO 

T  OUCHDOWN 

MEAN  TIME  = 

4.  02 

/  ».#•** 

STD.  DEy.  OF  TIME  = 

33 

r-0= 

MTBF  = 

1 0.  63408854972 1 43 1 440 1 324032 

“0* 

VARIATION  = 

.  1 

".♦Vs 

MEAN  OF  RELIABILITY  = 

.  9 9 9 3 9 3 5(2 2 6 5 5 3 36700 3 9 4 6 357 3  6 

:  0= 

STD.  DEV.  OF  RELIABILITY 

=  .  00C0053j67935 1 1 1 09932596 1571 53675 

20- 

MAX  VALUE  = 

.  99991 4340443946435666351277 

4{.|S 

VO  — 

MIN  VALUE  = 

.  99937 636-6037 655 161 50423 1176 

TOUCHDOWN  TO  STOP 

J'O — 

MEAN  TIME  = 

22.  73 

1 0= 

STD.  DEV.  OF  TIME  = 

53 

10= 

MTEF  = 

13.  3 6. 6 3 9 2 9 5 2 7 9 9 5 4 6. 0 3 9 7 3 1 7803 

10= 

VARIATION  = 

.  1 

.10= 

MEAN  OF  RELIABILITY  = 

.  9995343^7 669322093 1 966960332 

30 

STD.  Dev.  OF  RELIABILITY 

■  .  0000 1 07(6 1 095600736.336.73932561 42 

i  -o= 

MAX  VALUE  = 

.  99957093765449232587721 9945 

- = 

MIN  VALUE  • 

.  99949623423756995369 1 046245 

;  :f 

TOTAL  RELIAB'ILIT 

V  FROM  APPROACH  ARM  TO  STOP 

MEAN  'OF  R'EL  I  AB  I  i_  I  TV  = 

.  99704301?  95075593 1 520 1 333556 

STD.  DEV.  OF  RELIABILITY 

=  .  0000633^95 1  9 1 573597347 1 032554214 

MAX  VALUE  = 

.  9972250023736333359450 1 0427 

M I : i  VALUE  = 

.  9963775 1 935421 03705 1 4323 1 04 
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Vs 


SAFETY  ANALYSIS 


SYSTEM  OF'ERAT  I  ON'AL 


r'ROSAE;  I L I TY 
STD.  DEV.  - 
MAX  VALUE  = 
MIN  VALUE  — 


.  99934-343  1  830337327 3400*8 1317 
.  OOOO 1 4 3 4 9 3 3 0 0 4 3 33 4 7 1 1 343S4 1 3201 
.  9992-87552: 1  ‘720-3503353 1 05c- 1  9 y 
.  9  9  9  2  ‘7 900344273  -3  9222980-54749 


NON— CE 1 

T I  CAL 

rAlL'.-nic  AnE'  :;-U,.‘.-c.r-:-rUL  Ky  uA 

PROBAB-ILI 

TY  •=  . 

00*020*1 3 1+751 4431 479237-30>72-S3332 

STB'.  DEV. 

- 

OOOyOSOpO  1 0 2, 2. 5 -5 £ 5  y  i  ®30&3775©32,P 

MAX  VALUE 

= 

00022302-34 1 53992390103038791 73 

MIN  VALUE 

= 

000 1 7 442-475759037 0444023203-212: 

CRITICAL  FAILURE  TO  SWINGLE  CHANNEL  ANE*  3  U  C  0  E  £•'  S  r  U  L  R/GA 

PROBABILITY  =  .  000004 1|4 21 445243227 1 339’?  1 1502239 
2.  525247009755 1 309373371 0423E-7 
.  0000050 1 0532357 S3 1 9949 1 83045342 1 
.  00000350537993594 1471 323 1 33 1790 1 

WHEEL  SPIN- UP  NOT  DETEC’TEEi  AND  -SUCCESSFUL  R/GA 

=  5.  0 0 0 7 9 3 0 2 3 7 2 4 S 3 3 4 4 8 8 9 2 3 3 3 9 5 E ~  7 
2.  092-3799 1 2"9S05293-7 40399383 1 E- 3 
5.  57303 1 35237239994 1 2938 1 234E-7 
4.  5941249351 5703-31 4S:3034395E— 7 

NON— CRITICAL  FAILURE  DURING  ROLLOUT 
PROBABILITY  -  .  000402793934259330453381327348 


C= 

STB'.  DEV. 

MAX  VALUE 

MIN  VALUE 

0= 

WHEEL  3?  II 

’>= 

PROEAB I L I' 

STD.  DEV. 

!■= 

MAX  VALUE 

MIN  VALUE 

STD.  DEV.  = 
MAX  VALUE  — 
MIN  VALUE  » 


000009752 1 93-7034430 1 23553-3 1 3783 1 
0004333253272373 1 SS340 101 350 1 
0002-37 4 3 0 9 79077755 9 230 0 3 9 7  43 1  -3 


BACK-UP  ROLLOUT  MODE 

PROBABILITY  -  .  000004 i 72029 379728740032235 12277 
STB'.  E‘EV.  -  1.  94742 ic-4 150453024093 1 2 1 1 37E-7 

MAX  VALUE  =  .  0>000047 1 323350343233392-3 1 97S57S 


154 


ATTci'j'uATED  SAFETY  HAZARD  (LIMITED  PILOT  VISIBILITY)' 


Program  Listing  For  Reliability/Safety  Analysis 
(STACC  System  Configuration) 
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34 Cr  SECONDS  COMPILATION  TIME 
l  L  AWL33E-IN,  Rr—9'~"9 

'-i-E  CATALOG 

-  D7 6027 6  F FN=hWLS3E IN 

*/••••  02  00004736  WORDS. 

Ei  -.Mi,  AWLS 33 IN#  CV=1 

-  •  D  7  <  6 0 27 6  P  F  N = A  W  L  S  3  E I  f\l 

-  001  00004 7 Cl  WORDS. 

ME,  LOO,  AWLSSE'IN,  C'V=i,  RF‘—9'9'9 

-  D7 6027 6  P FN® AWLS3E I N 

-  002  00004736  WORDS. 

.'=  D7 6027 6  F‘FN=  AWLSSE I N 

-  001  00004736  WORDS;. 

\CH, CARDS 


7-20-7  7 


fi  0J/L53 
KPSC--0 


O  - 


-  /  JT  //u  $  O 


‘CLE  NO.  =  00 i 
F.DS,  S 


•=r'A7  ( T 23,  1050,  CM100000,  3TC3B)  D760276,  B(JS3INGER<  UD,  22'?- 42S£; 
i5SATTACH (LOO#  AWLSSE; IN,  C V  =  1 ) 

>=MAF‘  ( FART ) 

.=L'*-fi 

;=ip.R 

■=  5 AWLS  NL=iOO,  XPER*0.  ,  ANS-1* 

.H, CARDS,  INPUT, HERE 


I/ST/aX*  °  F 

CDS 

y.P£Lz  0 


.L  FILES — 

VS  *A3  *A2 

♦INPUT  “OUTPUT 
'TE  INPUT  FILES; — 

1  A LJ 

TE  OUTPUT  FILES;— - 
'  AE I  PAT I AFC 


AWLS 

*LGO 


AWLS2 

DUM1 
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m 


AS 

A 


L/STlOC,  QF  fi  I.JXS  3 


(T : 

Kpet  =.  o  V. 


3= 

PROGRAM  AW'LSS  ( Ii 

10= 

DOUBLE 

PRECISION 

20= 

DOUBLE 

PREC I 3 I ON 

D 

30= 

DOUBLE 

PREC I S I ON 

40= 

DOUBLE 

F  R EC 1 3 1 ON 

■2) 

30= 

DOUBLE 

PRECISION 

60= 

DOUBLE 

PRECISION 

70= 

DOUBLE 

PRECISION 

m 

DOUBLE 

PRECISION 

90= 

DOUBLE 

PREC I S I ON 

TMN 

00= 

DOUBLE 

PRECISION 

10= 

REAL  XMEAN  ( 9 ) ,  ST1 

20= 

COMMON 

MTBF ,  EH,  i 

30= 

COMMON 

PMEAN,  PDE! 

40= 
30= 
40= 
70= 
90= 
00= 
:  i  0= 
.20= 
:30= 
:40= 
.50= 
:60= 
:70= 
$0= 
•90= 
00= 

2( 


INTEGER  ANS 

NAMEL I  ST / AWLS/N'L,  Xr'ER,  ANS' 
DATA  NL.  XPER.  ANS/ 100.  0.  ,  1/ 
NL00P=NL 
CALL  RANSET < .  03 ) 

READ  AWLS 
PR I NT  AWLS 
DO  60  1=1, S 
SRT  <  I )  =0. 

60  SUMDIF  <  I  )=0. 

SRT  AA=0. 

SRTT =0. 

RTASD=0. 

RTTSD-0. 

ADI  =  1  OS.  77 S 
ECU IP ( 1 ) =AD I 
CONTP =631.  SOS 
ECU I F ( 2 ) =CONTP 
AISERv=2732.  240 

EGO I r ( S ) =A I  Sen V 

ELSERv=7936.  50S 
EGO I P  <  4 ) =ELSERV 
RUSERV=425.  S'"' 4 
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EQUIP<6)=AICGMP 
AT  0=7 1  A.  2:2:2 
wvU ir  (  /  )  —AT C 
CADC=41.  571 
EQU  I  F  ( S )  =CADC 
ELC0MP=274.  2.50 
EQU I  P  <  9  !  =ELCG'MP 
•5 SPEC  =4 '*■' •"•' .  251 
EQU  I  P  (  10)  =GSREC 
H2:!=2:43.  642: 

EQU I P  ( 1 1 ) =H2- I 
I  NS=  1 02:2:.  055 
EQU I P  (  1 2 )  =  I N2: 
MCC-626.  566. 

EQU  IP  {  12:)  =MCC 
NAVREC=1474.  926 
EQU  I P  <  14)  =NAvr.'EC 
NA'v'2.EL=730.  994 
EQU IF  < 15) =NAVSEL 
PAGYR0=381.  52:4 
EQU  I  r  (  16)  =PA6YP0 
PRGYR0=  152:2:.  462 
EQU  I  F  (  17)  —  FRG  YRO 
FAD  I  ND=493'.  097 
sw*j  IF  { 13)  =RA0 1 NO 
RADFT=22'4.  6.2;2 
EQUIP < 19)=RAGRT 
RRGYRO=  152:2:.  46.2 
EQUIP ( 20 )-RRGYRO 
RGACGM=341.  647 
EQU  I F  ( 2 1  )  —r;G  A  COM 
RDR=1S3\  9 
EQUIP < 22 )-RDR 
5TACC:=197.  663 
EQU  I F  <  22: )  =37  ACC 
TPLC=407.  330 
EQUIP (24) =7P!_C 
VGYRC=32:  1 .  534 
EQUIP < 25 )=VGYRG 
YDC0MP=304.  044 
EQU IP ( 2  6 ) =YDCGMP 
EQUIP (27) =1072.  961 
EQU  I  r  ( 23 )  =552.  792 
EQUIP  <  29 )  =259.  533 
EQU  I P  ( 2:0 )  =2066.  116 
EQU I P (3 1 )  =  1 472.  754 
EQU  I P  ( 32 )  =906.  6*12: 

E  QU I P  ( 2:2; )  =  1 0000. 
EQUIP (34) =10000. 
EQU I P ( 35 ) * 1 0000000 
EQUIP  ( 36  )  =  1 42357.  1 
EQU I P ( 37 ) = 10000000 
EQU  IP  ( 2:3: )  =200000. 
EQU  IP  ( 39 )  =500000. 
EQU  I P  ( 40  )  =200000. 
EQU  I P  (  4 1 )  =  1 000000. 
EQU I F ( 42 ) = I 0000000 
EQUIP ( 43 ) = 1 000000. 
EQU I r ( 44 ) = 1 0000000 
E  Q  U I P  (  4  5 )  =  1  6-  6  6  6.  6 
E QU  I F  (  4  6 )  =  1 16-71.  33 
EQUIP <47 ) =49504.  95 
r  QU  IF' <  43  i  =4662  5.  34 


50= 

50= 

s0= 


R7  ( <  N )  =DEXr  ( -  i .  *3UM28*  7 1  ME  ( 8 )  ) 

XM7EF  i  8  )  =  1 .  /SUM28 

EL  i  A=  <  4.  /MTEr  <  37  )  )  *  <  4.  /M7EF  <  3-5  >  )  •+■  ( 5.  /MTEF  (41)  )  +•  (  3.  /MTEF  <  34 ) 


6(1.  /MTEF  (  40 )  )  ■*  ( 2.  /M7E F  ( 49 )  )  -r  ( 2.  ./MTEF  ( 47  )  ) 

EL  1  E=  ( 2.  /M7EF  ( 45 )  )  ( 6.  /M7EF  <  38 )  )  +  ( 2.  /MTEir  (  46 )  )  +  (  2. 


/MTEF (48) 


•0=  7(1.  /M7EF  (  44  )  )  +  ( 4.  /M7BF  ( 4-3 ))  +  (!.  /M7EF  ( .39  )  ) 

>0=  ELi=ELlA+ELl£ 

0=  EL2=  (  i.  /M7EF  ( 4 1 )  )  *  <  1.  /M7EF  ( 34  )  ) 

20=  EL3=  1 .  /M7EF(49' ) 

50=  EL4=1.  /MTEF (48) 

50=  EL 5= ( 1 .  /M7EF ( 47 ) )  +  ( i.  /MTEF <  45 ) ) 

50=  EL 6=  ( 1.  /M7EF  <  4 1  >  >  +  <  1.  /M7EF  ( 34 ) ) 

30=  EL 7=  1 .  /M7E.F(4c;) 

70=  EG1  =  «  1.  /MTBF(S1)>+(S.  /M7BF <41)  )  +  <  i.  /MTEF (42) )  +  ( 1.  /M7EFC55)  ) 


30=  3  ( 3.  /MTEF  ( 50 ) )  +  <  4.  /M76F  ( 38 >)  +  <!.  /MTEF  ( 43 ) )  +  ( 1.  /MTEF  <  44 ) ) 

90=  £62* < 1.  /MTEF (41 ))  +  <!.  /MTEF (50) ) 

50=  DO  32  K=l»  8 

10=  EXFL1  =  (DEXP(-1.  *71  ME ( K ) *EL  1 ) ) * ( (3.  -<2.  *(D£XP(-1.  *7IME<K)*EL 

) 

20=  9**2.  ) * ( 3.  - ( 2.  *(DEXr  <-l.  *71MEOO*EL3>  > )  )*<3.  -(2.  *(DEXP(-i.  * 

30=  1 T I ME ( K ) *EL4 ) ) ) > 

40=  EXPL2=(3.  ~(2.  *(DEXP<  — 1.  *7IME(K)*EL5)  )  )  )*(2.  ~ DEXP(  — 1.  *7IME(K 


2EL6 )  )  *  ( 3.  —  ( 2.  *  < DEXP  ( —  1 .  *TI  ME (K)  *EL7  )  ) )  ) 


30= 

PL  GO  ( K )  =EXF'L  1  *EXF‘L2 

ii 

o 

N 

R03(K)=DEXP(-1.  *TIME(K)*£61 )* 

**4 

7Z~:. 

1.  ) 

R6RND <  K ) =RL0C  <  K )  *R0S ( K ) 

90= 

32 

PT  <  K>  N )  =RT  ( K,  N )  *R6RNEi  ( K ) 

30= 

RTAA  ( M)  =RT  <4,  N )  *RT  <  5<  N )  *RT  ( >3 »  1 

10= 

RTT ( N )  -RT < 1 ,  N  >  *RT  <  2, N  > *RT <  3,  N 

20= 

IF(AN3.  EG.  0)60T0  210 

30= 

CALL  SAFETY 

40= 

210 

DO  70  1*1.8 

50= 

70 

SP;T  ( I )  =RT  ( I .  N )  +SRT  ( I ) 

30= 

3RTAA*RTAA < N ) +SR7AA 

70= 

3F.TT =RTT  <  N )  +3RTT 

30= 

Ir(N.  EQ.  1 ) 6070  1 00 

-0= 

DO  30  1  =  1,8 

30= 

30 

NOMAX ( I ) = DMA XI ( RT  < I ,  N ) .  NUMAX ( 

10= 

MAXRTA=DMAX 1 (RTAA (N)» MAXRTA ) 

20* 

MAXRTT=DMAX1<R77<N>,  MAXR77) 

30* 

GOTO  110 

40= 

100 

DO  90  1=1.8 

30* 

90 

NUMAX ( I ) =R7  < I .  N ) 

30= 

MAXRTA=RTAA(N) 

70= 

MAXRTT=RTT (N) 

30= 

IF(N.  EG.  1 ) GOTO  120 

90= 

110 

DO  1 30  1  =  1.8 

30* 

1 30 

NUM I N ( 15  =DM I N 1 ( RT  < I .  N ) ,  NUM I N ( 

10= 

M I rir.'T A=E>M IN!  ( R7 AA i N ) .  MI NRT A ) 

10= 

M I NRT7=  DM I N 1 ( RTT  <  N ) . M I NRTT ) 

50= 

G 0  7 0*  4  0 

H  - 

1 20 

Du  1 40  1  =  1. 3 

’■  ',i — 

1  40 

•r.'.M  I N  (  I  )  =R7  i  I  /  N ) 

:CS 

MI  NR7 A=R7AA  !■<  i 

?r.st 

M I  iin'.TT -RTT  ( N ) 

:  0  s 

40 

CONTINUE 

•  0= 

DC  150  1  =  1/3 

•As 

i  50 

ME AM < I ) =SR7 ( I ) /FLOAT ( NLGOP ) 
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50=  i 60 
■  0- 


10- 

20= 


i  " 

■r  >■>= 


60*  2  ••'0 
?0= 

20= 
i  0- 

::p  " 

j.\  = 


J 


. .  •-•»  tiin  i.'  t  wvn  t  \  MuWi 

R77MN=SiRTT/FL0AT  ( NLOOr1 ) 

DO  260  N=  2 , NLOOF' 

DO  270  1=2 ,  S 

D I r R7M < I ) =R7  ( 1 1 N ) -MEAN <  I ) 

I F  ( D I r RTM  (  I ) .  LX.  0.  000000000000000000002)0070  175 
Dir  (  I  >  =  ( R7  (  I ,  N )  —MEAN <  I  )  )  **2. 

0070  270 


0  2  r  (  I  /  =0. 

SUMD IF  ( I )  =D I F  ( I )  ’■SOME* I F <  I ) 

FT  AD  I  r  =  <  RTAA  < N )  -R7AAMN  )  **2. 

R77DIF*  (  R77  <  N )  — RTTMN )  **2. 

RT  ASD=R7  AG  I F  tRT  ASD 
FiT7SE>=R77D  I F +RT7  3D 
C0N7 I NUE 
DO  1 SO  1  =  1,8 

DEV  ( I )  =DSQRT  ( SOME*  I F  ( I )  /  ( FL0A7  <  NLOOr' )  —  1 .  )  ) 

E‘EvRTA=DSQRT  ( FT ASE'/ ( F L0A7 (NLOOF-)— 1.  )  ) 

DEVRTT = Ei  SO  FT  ( RT7SD/  ( FL0A7  ( NLOOF )  —  1 .  )  ) 

PRINT*,  "  " 

PRINT*.  "  " 

PRINT*.  "  " 

PR  I  NT-* »  ’’  RELIABILITY  ANALYSIS 

PRINT*. "  " 

DO  2  90  1*2. S 
PRINT*. "  " 

PRINT*.  " 

PR  I  NT  * »  "  11 
PRINT*. "  " 

IF  (I.  EQ.  1) PRINT*.  " 

IF  (I.  EQ.  2)  PRINT*.  " 

IF  (I.  EQ.  3)  PRINT*.  " 

IF ( I.  EQ.  4) PRINT*.  M 

IF <  I.  EQ.  5) PRINT*.  ” 

x  F  (  I .  EQ.  6  )  PR  I  N'T *.,  " 


LOC  CAPTURE  TO  ARM  O'/S" 

ARM  O'/S  TO  0/S  CAPTURE" 

0/S  CAPTURE  TO  APPROACH  ARM" 
APPROACH  ARM  TO  LAND  ARM  ( 100  F 

LAND  ARM  (100  FT)  TO  FLARE  ENGAOE  ( 

FLARE  ENGAGE  <45  FT)  TO  DECRAB  (2 


IF (  I.  EQ.  7) PRINT*.  " 
IF  (I.  EQ.  Si)  PR  I  NT*.  “ 


DECRAB  (20  FT)  TO  TOUCHDOWN" 
TOUCHDOWN  TO  STOP" 


PRINT*. 
PRINT*. " 
PR  I  NT *.  " 
PRINT*,  " 
PRINT*. " 
PRINT*. ” 
PRINT*. " 
PRINT*, " 
PRINT*.  " 
PRINT*. 


MEAN  TIME  = 

STD.  DEV.  OF  TIME  = 

MTBF  = 

VARIATION  = 

MEAN  OF  R'ELIAEiILITY  = 
STD.  DEV.  OF  REL I  AE'IL  I TY 
MAX  VALUE  = 

MIN  VALUE  * 


",  XMEAN(I) 
",  STDDEV ( I ) 
",  XMTBFvi) 
",  XF'ER 
" ,  MEAN  < I ) 

",  DEV ( I ) 

",  NUN AX  < I > 
",  NUMIN(I) 


PRINT*,  " 


PRINT*.  "  " 

PRINT*,  "  " 

PRINT*.  "  TOTAL  RELIABILITY  FROM  APPROACH  ARM  T 


PR I NT * . 
r P I  NT* • 
r  R I  N’T  * , 
r  r,  I  NT* , 
F'R  I  N’T*. 
PR  I  NT * , 
PR I NT* , 
r  F,  I  NT  * , 
r  r  I  N'T  * . 


MEAN  OF  REL  I  AEiIL  I  TY  * 
S-'TD.  DEV.  OF  RELIABILITY 
MAX  VALUE  * 

MIN  VALUE  * 


RTAAMN 
DEv'RTA 
MAXRTA 
MI  NR T A 
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v= 

PR I  NT  * , 

II 

O 

r'RINT*, 

0= 

r  ft  I  NT  *•* 

'0= 

PRINT*, 

0- 

I  r  \  ANS.  i 

0*5:.. 

PRINT*, 

4  , 

PR  I  NT  * , 

o — 

PR I NT*, 

»o= 

PR  I  NT  *  / 

.0* 

PRINT*, 

*0= 

DO  1 95 

50* 

PRINT*, 

•0= 

PRINT*, 

>0= 

F’RINT*, 

0= 

IF  (I.  EG 

;o= 

IF ( I.  EG 

'A  " 

■0= 

IF  (I.  EG. 

.  E'r* 

10= 

1SFUL  R'/i 

10= 

IF  ( I.  EG. 

-  ft 

>0* 

1/0  A" 

?0= 

IF(  I.  EG 

>0= 

I  r  <  I .  EG, 

I  r  (  I .  EG, 

?  A 

>0= 

lC'LLOUT" 

:.  0= 

Ir  <  I.  EG, 

I'Os*... 

IF <  I.  EG, 

IF (I.  EG, 

A  i 

'  — 

1Y)  " 

:,o* 

IF ( I.  EG, 

/ 1  $ 

:0  s 

11BILITY 

r  0 = 

PRINT*, 

?o= 

PR I NT *  / 

■0= 

PRINT*, 

>0= 

PRINT*, 

.  V* 

PRINT*/ 

»o= 

i  93  CO  NT  I  NUi 

50= 

220  STOP 

;o= 

END 

"0— 

SUBROUT 

-l=s 

DOUBLE  i 

■•0— 

DOUBLE  i 

*o= 

DOUBLE  1 

50= 

DOUBLE 

■0= 

DOUBLE 

•0= 

DOUBLE 

l 

DOUBLE 

1 V  * 

DOUBLE  i 

•  V* 

DOUBLE  i 

MEAN  Op  RELIABILITY  -  ",  R7TMN 
STD.  Dev.  Or  RELIABILITY  —  ",  DEVR'TT 
MAX  VALUE  =  ",  MAXRTT 


ii IN  VALUE  = 


" ,  MAXRTT 
" ,  MINRTT 


:-nrei  i  HiiiMLi'iJS 

SYSTEM  OPERATIONAL" 

NON-CR I T I CAL  FAILURE  A NO  3UCCESSFU 

CRITICAL  FAILURE  TO  SWINGLE  CHANNEL  AND 

WHEEL  Sr’ IN— Ur'  NOT  DETECTED  AND  SUCCE 

NON-CR  I T I  CAL  FAILURE  DURING  ROLLOUT 

BACK-UP  ROLLOUT  MODE  ’* 

CRITICAL  FAILURE  TO  SINGLE  CHANNEL  Ei 

LOCALIZER  FAILURE  AND  SUCCESSFUL  R/GA 
SAFETY  HAZARD'" 

ATTENUATED  SAFETY  HAZARD  <NO  PILOT  VI 

ATTTENUA7ED  -SAFETY  HAZARD'  ( LIMITED'  r'l 


PROBABILITY  =  ",  FMEAN(I) 

STD.  DEV.  =  FDEV(I) 

MAX  VALUE  =  ",  F'MAXCI) 

MIN  VALUE  =  ",  FMIN(I) 


DOUBLE  PRECISION  ELS, EL7, TIM£<9>, 3UM26,  SUM27,  SUM2S,  RT(S,  100 
DOUBLE  PRECISION  PMEAN < i i ) , PDEV< i 1 > , PMAX U 1 ) . PMIN( 1 1 i , RRGA < 
DOUBLE  r  REC I S I  ON  r  ED(S ) ,  r'ATH(4S,  100) ,  G<  S) ,  EXFLi ,  EXF'LL,  LOCR'{ 
DOUBLE  PREC I S I  ON  r  \  11,  1 00 ) ,  AT  i  10) ,  PI  i  10),  FF1  \  10) »  D'F'P  (10),  AT 
D'OUBLE  PRECISION  r'2  ( S ) ,  PF2  ( S) ,  SUMPvil/i  SUMC-IF  <  1 1 ) »  D'lrF'v  i  1 ) , 
D'OUBLE  PRECISION  rEDir',  D-TTP,  DTTi,  D'772,  D'TTS,  TD'WSr',  TD'l,  TD2,  TDS 
D'OUBLE  r  REC  I  SION  TD'5,  FIN325,  FlNSi,  FIN32,  r'L7,  Fin,  D'T,  r'2SAl>  E'r' 
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DOL'ElE  r=;EC  I  :■  I  ON 

COMMON  MTEF, ELI,  I 

■0  = 

COMMON  r'MEAN,  r'C'E' 

c- - 

R'GA“t‘EXP(  —  1.  *<1. 

RRGA<  1  )  =  i.  —(2.  *Ri 

PPG  A  ( 2 )  =  ( 2.  *RGA ) 

RRGA  ( 3 )  =RGA**2. 

*V*  = 

R?.GA(4)  =  1.  — ROA 

RRGA ( 5 ) =RGA 

1C- 


1 


FEDr-DEXP (  —  1.  *  <  i.  /MTE;F ( 27 )  )-*7IM£(3)  ) 

rEEH  1  )  =  1.  — 0EXP(-1.  *  (  3LIM23-  ( 2.  #(1.  /MTEF  i  27  )  )  >  )  *7IME  ( 3 )  ) 

PEEK  2)  =2.  *F£DP—  { 2.  ■*  1 F EEir-3"»2.  )) 

PED(3)  =  i.  -<2.  *FEE'P )  i r EEiP**2.  > 

G <  1 ) =T I ME { 6 ) 

G  <  2 )  =T  I  ME  ( 7  )  -r  ( 1.  /3300.  > 

G  ( 3 ) =T I  ME  (S)  —  (  1 .  /Sc-OO.  ) 

DO  90 1  I  =  1 , 3 

E  X  PL 1  =  <  DE  XP  < - 1 .  *6<  I  )*EL1 )  )*(  (3.  -<2.  *<0EXP<- 1.  #0 ( I > *EL2 )  )  )  ) * 
1(3.  -<2.  *  i  DEXP  ( — 1.  *G<  I  )*£L3)  )  )  )*(3.  -<2.  *(DEXP(-i.  *G(I)*EL4)  ) 


EXP  L2=  ( 3. 


—  ( 2.  *  ( DEXP  <  —  1.  ■sG ( I )  *EL5  )))*)#(  2. 


-DEXP < — 1.  *0<I)*EL6) 


40= 

50= 

"0“ 

10- 

-■■Q- 


>0= 


10= 


1 2.  *  ( DEXP  {  -  1 .  *0  <  I )  *EL7 )  )  )  ) 
LOOP  ( 1 )  “EXP  L  i*EXF'L2 
PATH  (  1  i  N )  =FEEi  (  1  /  -*RRGA  <  1 ) 
PATH <  2 1  N )  —r EEi  i  1 )  *RRGA  <  2 ) 
FA7H  <  3»  N )  =FED  ( 1 )  *Rr;GA  ( 2;  > 
PATH (4.  N >  —r ED ( 2 ) *RRGA ( 4 > 
PATH  ( 5<  N )  —FED  ( 2 )  *RRGA  <  5 ) 
PATH <6.,  N)“FED<3) 

PATH (7,  N)=RT3N 
PF  A I L 1  =  1 .  —LOCK ( 1 ) 


FATH(30*  N)=F'A7H<1,  iN)-*F'FAIL1 
PATH <31»  N )  =PATH ( 2,  N)*PFAIL1 
PATH ( 32.  N)=PATH(3>  N)*rFAILi 
PATH  <  -*  f  N  >  =PATH  <  4 ,  N )  -apFAIL  1 
PATH <34,  N) “PATH <5.  N)*PFAIL1 
PATH (35,  N) “PATH (3,  N)*PFAIL1 
PATH ( 33,  N )  =F'r  AIL  1  ■*RT3N*RRGA(  1 ) 

P ATH ( 37,  N ) =PFA I L 1 *RT3N*RRGA  <  2 ) 

PATH  (  •i'O  t  N ) “PF AIL1 *RRGA <  3)#RT3N 
DTTP=E’EXP  ( —  1.  *(1.  /MTEF  (27)  >*7IKE<7> ) 

DTT1  =  1.  -DEXP(-1.  * ( SUM27— <2.  *<i.  /MTEF (27) ) ) )*7IME<7) ) 
D7T2=2.  #DT7P-  <2.  »<077P**2.  )) 

DTT3-1.  -(2.  *DTTP)+(D77P*«2.  ) 

PATH  <  S,  N  )  “Ci 77 1  *RRGA  (  i  ) 

PA7H ( 9,  N ) =D77 1 *RRGA <  2 ) 

F’A7H ( 10,  N )  =D77 1  #RR0A ( 3 ) 

PATH ( 1 i ,  N ) =DTT2*RRGA ( 4 ) 

PA7H ( 12,  N ) =DT72*RRGA ( 5 ) 

PATH(  13,  N)  “DT73 
PATH < 14,  N)=RT7N 

TDw3P=DEXP\-l.  *(i.  /M7EF(27 ))*<!.  /3300.  )) 

TDi=i.  -DEXP ( —  1 .  *(3UM2©—  (2.  /M7EF (27)  )-( 1.  /MTEF (23)  )  )*(  1. 


/330 


T D2  —  \  2.  *70WSP )  -  ( 2.  *  <  7DW3F  **2.  )  ) 

7E3“1  -(2.  *TDWSF )  +  ( 7DW3P*«£.  > 

7D4=1  -DEXP<-1.  *(1.  /M7EF(2S))*(1.  /3©0G.  )) 

TD5=DEX?  1.  ■*3!JM23*(i.  /3300.  )) 

F  ATH C  15-  M )  =TD  1  *RRGA •.  1  ) 

r ATH  < 13, N ) =TD 1 *RRGA ( 2 )  163 


■pnpMiMiPinMi 


PATH  <  20,  N )  =703 

PATH  <  2 1 ,  N )  =TD4*RRGA  (  1  ) 

PATH (22»  N ) =TD4*RR0A < 2 ) 
r'ATH  ( 23.  N )  =7D4*RRGA  ( 3 ) 

PATH  v 24. N ) =TD5 

P I NS25=DE/F' (  —  1 .  *(  i.  /MTBF (30)  )*(TIME<3)—  (  i.  / 34.00.  )  )  ) 

P INSi  =  (2.  *PINS25)-(2.  *  ( r' I  N-325**2.  )) 

PINS2=1.  —(2.  ■*?'!  N'S2'5 )  +  <  r'INS25**2.  ) 

PATH ( 25.  N)  =  1.  -DEXF’(—  1.  *(SUi".2S— <  1.  /MTE^F  (29)  )  )*(7IME(S)~  ( 1.  /3 
1  ’•p'lNSl  -rp'I  NS2 

PATH  ( 2  6.  N )  =  1 .  - E'EXP  <  — 1 .  *  ( 1 .  /MTE^F  (3i  )  )  *  (  T I  HE  ( 3 ) —  (  i.  /3600.  )  )  ) 
F'27=DEXF'  ( —  1 .  •>  ( 1 .  /M7EF  ( 22 ) )  *  ( T I  ME  ( S )  -  ( 1 .  /3600.  )  )  ) 

PATH  (27.  N )  =  ( 2.  *P27 )  —  ( 2.  *(F,27*-*2.  )  ) 

PATH  (  23.  N )  =  1.  -  ( 2.  *P27 )  +  ( r'27**2.  ) 

PATH ( 29,  N )  =DEXr  < - 1 .  *SUM28*  <  71  ME  (  3 )  -  ( 1.  /3600.  )  )  ) 

DO  902  1  =  1.7 

902  P  ATH  ( I ,  N )  =p'AT‘ri  ( I .  N )  *L0CR  ( 1  ) 

?FAIL2=i.  -LOCK ( 2  > 

PATH  <  39. N ) =PFA I L2* ( 1 .  -DEXP ( - 1 .  *  < 3UM2S+ ( i .  /MTBF ( 1 4 ) ) - < 1 .  /MTB 
1  *  <  TI  ME  ( 3 )'—  ( 1 .  /3600.  )))) 

P40=DEXP ( ~ 1 .  * ( 1 .  /MTBF ( 52 ) ) * ( T I ME ( 3 )  -  ( 1 .  /3600.  ) ) ) 

PATH ( 40.  N )  —r FA IL2* (  ( 2.  *P40)  — (2.  *<940**2.  ))) 

PATH  (  4 1 .  N )  =r'FA IL2* (  1.  -(2.  *r  40 )  ~  ( F40**2.  t  ) 

PATH  ( 42.  N )  =r'FA  I  L2*D£Xr'  ( —  i .  *3UM23*  ( T I  ME  ( 3 )  —  ( 1 .  /3600.  ) )  ) 
r'F  AILS—  1.  -LOCK (3). 

c'A7H< 43.  N )  =LGCR (2) *PFAIL3* ( 1.  -DEXP( -1.  * ( SUM23+  <  i .  /MTEF<14)) 
1BF<29>) >*<T!ME(S>-(1.  /3600.  )))) 

r'ATn(44»  N)  =LOCR  ( 2)  *P  FAILS*  (  (2.  *r40)  —  <2.  *<F'40**2.  )  )  ) 
r'ATH ( 45.  N )  =LOCR ( 2 )  *F'FAIL3*  ( 1.  —  <2.  *P40 )  +  ( F'40**2.  )) 
r-  PA7H(46,  N)=L0CR(2)*F'FAIL3*E>EXr'<-l.  *SUM23*  (  TIME  (S')  —  ( 1.  /3600. 

DO  700  1=3.  14 

700  PATH ( I ,  N )  =r'ATH (I.  N ) *F'ATH < 7.  N ) 

DO  710  1=15.24 

710  PATH!  I .  N)  =F'ATH ( I ,  N )  *r'ATH  <  1 4.  N ) 

DO  720  1=25.29 

720  PATH  ( I .  N )  =F'A7H  ( I .  N )  *r'A7H(  24.  N )  *LGCR  ( 2 )  *LOCR ( 3 ) 

DO  333  1=39, 46 

333  PATH  ( I ,  N )  =F'ATH  (I,  N)  *F'A7H  ( 24 ,  N ) 

F'(I.N):  I  IS  THE  INDEX  FOR  11  DIFFERENT  PROBABILITIES  TO  B 

COMPUTED 

P( 1.  N)=FATH(29,  N) 

P  ( 2.  N )  “PATH  (2,  N )  +PATH  <  3,  N )  ’■PATH  (  9.  N )  ’•PATH  ( 1 0,  N )  +PATH  <16,  N )  + 
1,  N> 

F'  ( 3.  N )  =PATH  ( 5.  N )  +PA7H  ( 12,  N )  +PATH  <  1 9,  N  > 

P( 4.  N)=PATH(22,  N)+PA7H(23,  N) 

F'(5,  N )  =FATH  ( 25,  N) 

r'v'6,  N )  =FATH(.26,  N )  +PATH <  39.  N)+r'ATH(42,  N)-rPATH(43»  N)+F'ATH(46, 

1  ( 40.  N )  +PATH  (  44,  N ! 

F  (  7,  N )  =PATH  (27.  N ) 

F  SH=PATH  <  1 ,  N )  ’■PATH ( 4 .  N )  ▼?  A7H(  6.  N )  ■’•r'ATH  ( 3.  N )  +PA7H ( 1 1 ,  N )  +F'ATH 

1  PATH (  15,  N;+F'ATH(  13.  N) tPATH (  20.  H ) +r ATH ( 2 1 ,  N)+FA7H(30»  N)+F'ATH 

1  r'ATH  ( 25, W ) ’■PATH ( 36.  N) 

-  .  U  >  =P SHr-5  ATH  (23,  N  >  ’■PATH '  4  i  ,  N  >  ’■PATH (45.  N ) 

r  (  2,  N )  =  ?  ATH  (  Si  <  N  > ’F  ATH ( 32.  N  )  *r  ATH  (  34,  N )  +PA7H (  37 ,  N )  ’■r'ATH ( 33, 


A  i  <  i  )  =5. 

AT i  2 ) =6  9 
AT  ( 3 )  =3.  6 
AT  <  4  )  =10.  2 
AT  ( 3  )  =  i  2. 

AT  (  6 )  =  1  3.  4 
AT  ( 7 )  =  i'4.  9 
AT  ( S )  =  i S. 

AT  <  9  )  =  1 9.  5 
AT ( 1 0 ) =2 1 . 

DO  600  I  =  i  ,  10 


t".  vvv  •  —  -  >  i  V 

Pi  ( I )  =DEXr  (  - i .  *  ( 1 .  /MTBF  ( 2:2 )  )  *  <  i  AT  ( I )  / 3600.  )  +liT  ) ) 

F  4  i  (Y)  =DEXP  <  - 1 .  *  ( 1 .  /MTBF  <  52  ))*(<  AT  (  I )  /3600.  )  +DT )  ) 
PF 41  (  I )  =1.  -(2.  *P4 1  ( I ) )  -r  < P4 1  <  1  > **2.  ) 

600  PF  1  ( I  )  =  1 .  -  (2.  *P  1(I);t<P1(I)  **2.  ) 


DO  610  1=2.  10. 

DPF41  (  I  >=FF4i  v  I  )-rF41  ( I  — 1 ) 


Ur  r  4 1  (  I  .•  =rr  41(1/  rrr  4 1  (  X  ~  I  ) 

6 1 0  DPP  < I ) =rr 1(1) — PF 1?  £- 1 ) 

P2S'A1=PF  1  (  i  )  +  <  OFF  (2 )*.  9  )■*•<  DP F <  SO*.  3 )  +  < DPF  ( 4  )*.  7 )  +  <  DPF <  5)+.  6 

16)*.  4 )  +  < DPF ( 7 )  *.  2 )  +  ( DPF <  3  >  *.  1  )*<DrF(  ?>*.  05) 

P4  i  A 1  =r'F4 1  (  1  )  -r  ( DPF4 1  (2  )  *•  9 )  -r(  OFF  4 1*  (  3 )  *.  SO  +  (BFF  41  (4  )*.  7),*-<CtP' 

i .  6- )  +  (  OFF  4 1  < )  *.  4 )  -r  ( Eirr  41  {  7 )  *.  2 >  ▼  ( DPF4 1(3')*.  1  )  ■*•  (  Eirr  41  ('?')*.  05 

P43Ai=P41Al 

P(  10.  N )  =P3H-r ( F2SA1  *PATK ( 24.  N)*L0CR(2)*LGCR<3)  )*(P41Ai*F'ATn( 

1  PF  A I L2 )  +  ( P45A 1  *PATn  (24,  N )  *LOCR  ( 2  )-*PFA  I L3 ) 

ATTENUATION  FUNCTION  WITH  LIMITED  PILOT  VISIBILITY 
AT2  ( 1 )  =3. 


AT2  (2)  =5. 

AT2  <  3 )  =6.  9 
DO  620  1  =  1,3 


5=  F4 1 A < I) =BEXP ( - 1 .  * ( 1 .  /MTBF ( 52 ) > * ( ( AT2 < I ) /3600.  ) +DT >  > 

F'2  ( I )  =D£XP ( - 1.  *(1.  /MTBF(32)  )*(  ( A72(  I  )/3'600.  )+DT)> 

'5'-  PF4 1 A  <  I )  =  1 .  —(2.  *P4 1 A  ( I ) )  *r  ( P4 1 A ( I )  **2.  ) 

620  PF2 ( I )  =  i .  —  ( 2.  *r"2  <!))  +  (  P2  <  I )  **'2.  ) 

:•=  OF  F41 2=F  F  4 1 A  ( 2 )  -PF4 1 A  ( 1  ) 

0  ~  DPF2=PF2 ( 2 ) ~PF 2 < 1 ) 

f  -  OF  F  4 1 3=FF4 1 A ( 3 ) —PF4 1 A ( 2 ) 

0=  .  OF  r  3=FF2  (  3 )  -r'F2  ( 2 ) 

0—  •  r,23A2=FF2  (  1 )  +  ( DF'F2*.  6)^(Eip'F3*.  1) 

'j-  P4  1  A2=PF4l A ( 1 ) t ( DFF412*.  6)* ( DPF 413*.  1) 

;•=  F4  5A2=F41A2 

0 -  P  (  1 1 ,  N )  =F'SHt  ( P2SA2*PATH  ( 24,  N )  *LOCR  ( 2 )  *LOCR ( 3 ) )  +  <  P4 1  A2*PATH  ( 


1 PFAIL2 > ( P43A2*r  ATH ( 24,  N ) *LOCR ( 2 ) *F FAILS > 
I  r  ( N.  OE.  2 )  OOT  07 
DO  630  1  =  1,  11 
SUMP  ( I  )  =0. 

630  SUMD I P  <  I  > -0. 

7  DO  640  1  =  1,  1.1 
640  SUMP  <15  —r  (  I ,.  N )  t'SUMF'  ( I  ) 

IF(N.  EG.  1 ) OOT 0  302 
00  SOI  1  =  1,  11 

PM AX (  I  )=0MAX1 (F < I,  N>,  PMAX ( I  )  / 

30  1  PM  I M  (  I  )  =0M INI  ( P  (  I ,  N  > ,  r'M  IN  <  I  )  ) 

GOTO  S04 

£02  00  303  1  =  1,  11 
FMAX ( I )=F  < I,  N) 

.'  :  ='M  I M  (  I  )  *P  (  I ,  N ) 

3*4  I-(fi.  NE.  WLOOF  ) GOTO  730  ,,, 

r„-  7=1  .  il 


C-VV  1  —  i.  11 

■v  -  MEAN  (  I  )  =SL>f1?  ( I  )  /"FLOAT  ( NLOOP  ) 

DO  660  J=  1 »  NLOOP 

DO  670  I = 1 » 11 

DEL  (  I  >  — F ;  I  <  •-> )  — PMEAN  ( I  ) 

IF <DEL< I ).  LT.  0.  000000000000000000001 ) OOTO  £00 
Ei  I FF  <  I )  -  < F  <  I  «  J )  —  PMEAN  ( I  )  )  -**2. 

GOTO  670 
>0  D I  FF  ( I )  =0. 

*0  SUMD I F ( I ) =D I FF ( I ) +SUMC I P ( I ) 

;0  OONT I NUE 

DO  6£0  1  =  1.  11 

>0  PDEV < I >  =D£QRT « SUMD I P ( I ) / ( FLOAT ( NLOOP ) - 1 .  ) ) 

50  RETURN 
END 
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APPENDIX  C 


EXTRACTS,  C-  141  AWLS  OPERATIONAL  FLIGHT  TESTS 

AFFDL-TR-77-39 


This  report  presents  the  results  of  approximately  1200  approaches  and 
;<•  udir.gs  of  which  82  were  accomplished  in  actual  Category  III  weather  conditions 
i  R  V'R  less  than  1200  feet)  including  14  landings  in  a  reported  RVR  of  zero.  The 
it'.-sts  were  conducted  with  a  C-  141  aircraft  flying  only  Category  II  or  III  ground 
LI.S  equipment  on  runways  furnished  with  U.S.  Standard  ALSF-1  approach  light¬ 
ing  and  touchdown  Zone  Lighting  (TDZL  systems.)  Since  the  step  4  approach 
Sight  setting  was  considered  optimum,  it  serves  as  the  basis  for  evaluation  for 
his  test. 

The  conclusions  of  the  test  program  were  subjective  in  nature  and  based 
upon  the  experience  of  the  project  test  pilot:  however,  a  majority  reflect  the 
onsensus  of  opinion  of  other  participating  pilots  and  test  observers.  Conclusions 
■ere  as  follows: 

Basically  four  parameters  comprise  the  landing/ go -around  decision  criteria: 
a.  Aircraft  position  relative  to  glideslope  and  localizer. 

I).  Aircraft  lateral  and  vertical  rates 
v.  System  integrity, 

d.  Aircraft  attitude. 

An  automatic  landing  should  be  the  primary  mode  for  Category  III  landings. 

>.  A  specific  point  of  landing  committal  should  be  determined  based  upon 
aircraft  performance  characteristics. 

1.  Step  4  approach  light  setting  is  optimum. 

s.  Aircraft  landing  lights  provide  no  assistance  for  the  landing  and  produce 
undesirable  reflections  at  altitude. 

...  The  strobe  and  approach  lights  are  useful  down  to  RVR's  of  approximately 
;H)0  feet. 

Roll  bars  in  the  ALSF-1  lighting  system  were  generally  ineffective  aids. 
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8.  The  runway  threshold  lights  were  very  ineffective. 

9.  The  touchdown  zone  lights  were  generally  very  effective  and  provided  the 
primary  cues  for  operation  in  RVR’ a  less  than  800  feet.  The  touchdown  Zone 
(TDZ)  lights  were  positively  acquired  at  approximately  50  AGL  (Absolute 
Ground  Level)  for  an  RVR  estimated  to  be  200  feet. 

10.  Although  visual  verification  of  lateral  position  and  rate  were  possible 
before  touchdown  (point  of  commitment  for  the  test  vehicle),  The  TDZ  lights 
did  not  provide  cues  to  complete  a  flare.  Overall  attitude  and  altitude  infor¬ 
mation  were  lacking. 

11.  Based  upon  the  test  aircraft  geometry,  the  lowest  RVR  which  provides  a 
se  -to-land  capability  is  1000  feet  reported  RVR  and  then  only  if  all  flight 
conditions  are  optimum. 

12.  The  runway  edge  lights  were  generally  not  a  factor  in  the  final  visual 
field  upon  landing. 

13.  If  lateral  excursions  from  the  runway  centerline  are  kept  within  jj-  30  feet, 
the  centerline  lights  provide  acceptable  cues  to  complete  visual  takeoffs  and 
landings  for  RVR  as  low  as  200  feet  estimated  (based  upon  pilot  eye  height  of 
approximately  15  feet  above  ground). 

14.  Major  inadequacy  of  the  runway  lighting  system  is  the  lack  of  longitudinal 
information  and  corresponding  taxiwa#'  turnoff  definition  for  ground  operation. 

15.  The  onset  of  taxi/ground  operation  difficulties  correlates  to  a  reported 
RVR  of  approximately  600  feet. 

16.  Unacceptable  localizer  signal  oscillations  caused  by  overflight  of  the 
transmitter  antenna  by  other  aircraft. 

17.  Compared  to  normal  instrument  flight,  the  task  involved  with  completely 
instrument  landings  demand  considerably  increased  pilot  precision  and  concentra¬ 
tion  and  consequently  greater  overall  workload. 

18.  Due  to  capability  limitations  in  general  cockpit  management  and  restricted 
instrument  crosscheck  capability,  manual  approaches  are  not  feasible  as  a 
primary  operational  mode. 

19.  The  unique  wing  low  decrab  instrument  maneuver  was  initially  difficult  to 
become  accustomed  to  on  instruments.  Although  some  flexibility  and  touchdown 
point  accuracy  were  gained,  the  tests  provided  no  definite  support  for  the  re- 
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quirement  of  the  wing  low  decrab  technique  as  long  as  10  KTS  direct  cross- 
vind  was  not  exceeded. 

20.  Biomedical  tests  were  inconclusive  and  yielded  little  difference  in  results 
compared  to  data  taken  during  normal  Category  II  approaches. 

2  1.  If  the  criteria  for  a  satisfactory  backup  mode  consists  of  providing  only 
control  task  capability,  the  manual  mode  of  operation  qualifies  throughout  all 
phases  of  approach  and  landing.  The  manual  mode  is  satisfactory  as  a  primary 
technique  for  landing  rollout  and  takeoff. 


RECOMMENDS  TIONS 

Asa  result  of  experience  in  this  program,  the  project  pilot  offered  a 
number  of  recommendations: 

1.  Runway  threshold  definition  is  critical  and  a  major  effort  for  improved 
effectiveness  should  be  undertaken. 

2.  All  Category  III  landings  should  be  totally  instrument  landings  at  least  to 
touchdown  point. 

i.  Rows  of  lights  perpendicular  to  the  runway  centerline,  extending  approx¬ 
imately  '5  feet  to  either  side,  could  be  located  directly  abeam  each  useable 
taxivay  turnoff.  In  addition  to  positive  turnoff  definition,  these  lights  would 
provide  longitudinal  information. 

I.  The  RVP  breakdown  for  Category  III  should  be  aligned  to  the  correlation 
between  actual  RVR  and  reported  RVR.  Based  upon  these  test  results,  this 
correlation  suggests  a  breakdown  as  follows: 

Category  Ilia  -  RVP  1200  ft  to  600  feet 

Autoland,  visual  rollout,  visual  taxi. 

Category  Illb  -  RVP  less  than  600  feet 
Category  Illb  -  RVR  less  than  600  feet 

Autoland,  auto- rollout,  *  auto-taxi** 

The  assessment  of  conditions  down  to  200  feet  estimated  RVR  indicates 
that  visual  rollout/ takeoff  could  be  conducted.  Auto  is  specified  to  ensure 
capability  based  upon  excellent  instrument  rollout  results  and  also  to  include 


capability  to  actual  zero  visibility. 
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**  As  suggested  earlier,  visual  assistance,  such  as  taxiway  centerline 
lights  may  provide  improvement  sufficient  to  visually  taxi  in  RVR  conditions 
less  than  600  feet  reported. 

5.  Improvements  in  instrument  displays  integrating  failure  warning  and 
performance  parameters  with  the  control  display  could  achieve  feasibility 
for  the  manual  mode  to  be  a  primary  mode. 

6.  Considering  the  narrow  bounds  of  pilot  capability  during  manual  approach¬ 
es,  the  display  integration  process  should  focus  upon  representation  of  all  the 
integrated  parameters  through  flight  director  presentation. 


AFFDL-TR-77-39 


GREEN 


6000  0 


ooooo  ooo 


o  o  o  o  o 


00  060 


00600 

6000  O 

00600000  ooooo 
^  » 
WHITE - ► . 

o 

ooooo 

0 


SEQUENCED - - 

FLRSHINE  •*:** 
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